CVE-2023-28583

Memory corruption when IPv6 prefix timer object`s lifetime expires which are created while Netmgr daemon gets an IPv6 address.

Score

CVSS 3.1 7.8 High

Status

Modified - product-security@qualcomm.com

Published

2024-01-02

Last modified

2025-06-17

Weaknesses

CWE-415

Affected products

• Aqt1000 Firmware (Qualcomm)
• Fastconnect 6200 Firmware (Qualcomm)
• Qca6420 Firmware (Qualcomm)
• Qca6430 Firmware (Qualcomm)
• Qca6574au Firmware (Qualcomm)
• Qca6696 Firmware (Qualcomm)
• Sa6145p Firmware (Qualcomm)
• Sa6150p Firmware (Qualcomm)
• Sa6155p Firmware (Qualcomm)
• Sa8145p Firmware (Qualcomm)
• Sa8150p Firmware (Qualcomm)
• Sa8155p Firmware (Qualcomm)
• Sa8195p Firmware (Qualcomm)
• Sd855 Firmware (Qualcomm)
• Snapdragon 855+/860 Mobile Platform Firmware (Qualcomm)
• Snapdragon 855 Mobile Platform Firmware (Qualcomm)
• Snapdragon W5+ Gen 1 Wearable Platform Firmware (Qualcomm)
• Snapdragon Wear 4100+ Platform Firmware (Qualcomm)
• Sw5100 Firmware (Qualcomm)
• Sw5100p Firmware (Qualcomm)
• Wcd9341 Firmware (Qualcomm)
• Wcn3610 Firmware (Qualcomm)
• Wcn3660b Firmware (Qualcomm)
• Wcn3680b Firmware (Qualcomm)
• Wcn3980 Firmware (Qualcomm)
• Wcn3988 Firmware (Qualcomm)
• Wsa8810 Firmware (Qualcomm)
• Wsa8815 Firmware (Qualcomm)
• Wsa8830 Firmware (Qualcomm)
• Wsa8835 Firmware (Qualcomm)
• Snapdragon (Qualcomm Inc.)

References

• https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin