Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Back

CVE-2023-28580Buffer Copy Without Checking Size of Input in WLAN Host

Description

Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache.

Timeline

  1. ID reserved

    By qualcomm

  2. · 9 months later

    Published

  3. · 18 months later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2023-28580, by who scored it
Scored byCVSSScoreVector
qualcommCNA (assigner)3.1Medium6.7CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Modified3.1High7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
0.16% · top 95% of all CVEs (12 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: total
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.7.

Affected products

  • Qualcomm, Inc. · Snapdragon

    • affected AR8035
    • affected FastConnect 6900
    • affected FastConnect 7800
    • affected QAM8295P
    • affected QCA6391
    • affected QCA6574AU
    • affected QCA6595AU
    • affected QCA6696
    • affected QCA8081
    • affected QCA8337
    • affected QCC710
    • affected QCN6224
    • affected QCN6274
    • affected QCS410
    • affected QCS610
    • affected QFW7114
    • affected QFW7124
    • affected Qualcomm Video Collaboration VC1 Platform
    • affected Qualcomm Video Collaboration VC3 Platform
    • affected SA6145P
    • affected SA6150P
    • affected SA6155P
    • affected SA8145P
    • affected SA8150P
    • affected SA8155P
    • affected SA8195P
    • affected SA8295P
    • affected Snapdragon 8 Gen 1 Mobile Platform
    • affected Snapdragon X75 5G Modem-RF System
    • affected SW5100
    • affected SW5100P
    • affected WCD9340
    • affected WCD9341
    • affected WCD9370
    • affected WCD9380
    • affected WCN3660B
    • affected WCN3680B
    • affected WCN3950
    • affected WCN3980
    • affected WCN3988
    • and 4 more

References

References1

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2023-28580 badge
[![CVE-2023-28580](https://cveledger.app/badge/CVE-2023-28580.svg)](https://cveledger.app/cve/CVE-2023-28580)

Record last updated .