CVE-2023-28562
Buffer Copy Without Checking Size of Input in QESL
Memory corruption while handling payloads from remote ESL.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Buffer Copy Without Checking Size of Input in QESL
Memory corruption while handling payloads from remote ESL.
- Record
CVE-2023-28562- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-120
- Updated
- 2026-11-02
EUVDEUVD-2023-32232
Memory corruption while handling payloads from remote ESL.
- Record
EUVD-2023-32232- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-wjq7-rmcv-8f9w
Memory corruption while handling payloads from remote ESL.
Memory corruption while handling payloads from remote ESL.
- Record
GHSA-wjq7-rmcv-8f9w- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-120, CWE-787
- Updated
- 2026-11-02
NVD
Memory corruption while handling payloads from remote ESL.
- Record
CVE-2023-28562- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-120, CWE-787
- Updated
- 2026-11-02
Affected products
- qualcomm aqt1000 firmware
- qualcomm fastconnect 6200 firmware
- qualcomm fastconnect 6800 firmware
- qualcomm qca6391 firmware
- qualcomm qca6420 firmware
- qualcomm qca6430 firmware
- qualcomm qcn7606 firmware
- qualcomm qcs410 firmware
- qualcomm qcs610 firmware
- qualcomm sc8180x-aa firmware
- qualcomm sc8180x-ab firmware
- qualcomm sc8180x-ac firmware
Show 57 moreShow less
- qualcomm sc8180x-ad firmware
- qualcomm sc8180x-af firmware
- qualcomm sc8180x\+sdx55 firmware
- qualcomm sc8180xp-aa firmware
- qualcomm sc8180xp-ab firmware
- qualcomm sc8180xp-ac firmware
- qualcomm sc8180xp-ad firmware
- qualcomm sc8180xp-af firmware
- qualcomm sd460 firmware
- qualcomm sd662 firmware
- qualcomm sd730 firmware
- qualcomm sd855 firmware
- qualcomm sdx55 firmware
- qualcomm sm4125 firmware
- qualcomm sm6250 firmware
- qualcomm sm6250p firmware
- qualcomm sm7250p firmware
- qualcomm snapdragon 460 firmware
- qualcomm snapdragon 480\+ 5g firmware
- qualcomm snapdragon 480 5g firmware
- qualcomm snapdragon 662 firmware
- qualcomm snapdragon 675 firmware
- qualcomm snapdragon 678 firmware
- qualcomm snapdragon 690 5g firmware
- qualcomm snapdragon 695 5g firmware
- qualcomm snapdragon 720g firmware
- qualcomm snapdragon 730 firmware
- qualcomm snapdragon 730g firmware
- qualcomm snapdragon 732g firmware
- qualcomm snapdragon 750g 5g firmware
- qualcomm snapdragon 765 5g firmware
- qualcomm snapdragon 765g 5g firmware
- qualcomm snapdragon 768g 5g firmware
- qualcomm snapdragon 855\+ firmware
- qualcomm snapdragon 855 firmware
- qualcomm snapdragon 860 firmware
- qualcomm snapdragon x50 5g firmware
- qualcomm snapdragon x55 5g firmware
- qualcomm vision intelligence 400 firmware
- qualcomm wcd9326 firmware
- qualcomm wcd9335 firmware
- qualcomm wcd9340 firmware
- qualcomm wcd9341 firmware
- qualcomm wcd9370 firmware
- qualcomm wcd9375 firmware
- qualcomm wcd9380 firmware
- qualcomm wcd9385 firmware
- qualcomm wcn3910 firmware
- qualcomm wcn3950 firmware
- qualcomm wcn3980 firmware
- qualcomm wcn3988 firmware
- qualcomm wcn3990 firmware
- qualcomm wsa8810 firmware
- qualcomm wsa8815 firmware
- qualcomm wsa8830 firmware
- qualcomm wsa8835 firmware
- qualcomm, inc. snapdragon
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-28562 is a critical vulnerability (CVSS 9.8) in Qualcomm Aqt1000 Firmware, published September 5, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 37th percentile. No source names a fixed version.