CVE-2023-28549
Vulnérabilité élevée dans Snapdragon (Qualcomm, Inc.)
CVSS 7.8 · Élevée
EPSS 0.1%
Qualcomm, Inc.•Snapdragon•Versions : IPQ9008, QCN5124, IPQ8065, SSG2125P, QCA8337, QCA6431, Snapdragon 8cx Compute Platform (SC8180XP-AC, AF) "Poipu Pro", QCA1064, QCN9100, SC8180X+SDX55, Snapdragon 865+ 5G Mobile Platform (SM8250-AB), WSA8832, WSA8835, QCA6574A, QCN9000, IPQ8076, QCA6678AQ, SM7315, QCN5054, QCA6420, QCN9074, QCN6132, SA6155P, WCD9370, SD888, WCD9385, QCN5052, QCA8072, QCA6696, Snapdragon 695 5G Mobile Platform, Snapdragon 750G 5G Mobile Platform, QCN6100, IPQ8071A, Snapdragon 778G+ 5G Mobile Platform (SM7325-AE), SA8150P, Snapdragon 8c Compute Platform (SC8180X-AD) "Poipu Lite", SA6150P, QCA6574AU, QCA9984, QCN9011, Snapdragon 865 5G Mobile Platform, WCN3990, Snapdragon Auto 5G Modem-RF, QCA9889, IPQ6018, QCN9012, QCA8084, QAM8295P, QCA2066, QCN5154, WCN3988, QCA6320, QCA6564AU, QCN9002, SD 455, QCA6564A, QCS6490, Snapdragon 835 Mobile PC Platform, Immersive Home 316 Platform, Snapdragon 8c Compute Platform (SC8180XP-AD) "Poipu Lite", QCA9994, WCD9380, QCA9898, QCM4490, SA6155, WSA8830, IPQ6028, QSM8250, Qualcomm Robotics RB5 Platform, FastConnect 7800, QCN9022, IPQ8072, Snapdragon 8cx Compute Platform (SC8180X-AA, AB), QCN5152, QSM8350, QCA6698AQ, QCN6112, QCA9980, QCS8250, QCA4024, IPQ5010, Snapdragon 7c+ Gen 3 Compute, Snapdragon 8+ Gen 1 Mobile Platform, SSG2115P, SW5100, WSA8815, QCA6595AU, Snapdragon XR2+ Gen 1 Platform, QCA8085, QCM6490, QRB5165N, SA8155, IPQ8074A, QCN5021, QCA9985, QCA6421, IPQ8070, SA4150P, SD835, QCN9001, QCN9024, IPQ8078, IPQ8071, QCN5164, QCA9990, SM7325P, Snapdragon Auto 4G Modem, Immersive Home 214 Platform, WCD9341, QCA6584AU, Snapdragon 888+ 5G Mobile Platform (SM8350-AC), Snapdragon 8cx Gen 2 5G Compute Platform (SC8180X-AC, AF) "Poipu Pro", Snapdragon X65 5G Modem-RF System, QCA6438, QCN5064, Snapdragon 870 5G Mobile Platform (SM8250-AC), AR9380, SM4450, QCN5022, SM7250P, QCN9274, Snapdragon 660 Mobile Platform, SW5100P, IPQ8064, IPQ8173, WCN3950, SA8145P, WCD9340, QRB5165M, Snapdragon X55 5G Modem-RF System, QCA2064, WCD9375, Snapdragon 630 Mobile Platform, Flight RB5 5G Platform, SD 8 Gen1 5G, Snapdragon 8 Gen 1 Mobile Platform, SA8195P, QCA1062, FastConnect 6200, IPQ4018, Snapdragon AR2 Gen 1 Platform, SXR2230P, IPQ8076A, IPQ5028, QCN9072, QCA6430, SD865 5G, QCN6023, Immersive Home 318 Platform, QCA6428, QCA9888, IPQ8174, QCA6554A, PMP8074, FastConnect 6900, IPQ4019, QCA6574, QCN6122, Snapdragon 765 5G Mobile Platform (SM7250-AA), IPQ9574, 315 5G IoT Modem, QCA7500, AR8035, QCA6436, QCA9880, QCA8075, Snapdragon 4 Gen 1 Mobile Platform, IPQ8072A, QCN5550, WCD9335, QCA6310, QCN5122, QCN9070, SA6145P, QCN6102, Snapdragon 768G 5G Mobile Platform (SM7250-AC), QCA6595, QCA8386, QCN6024, QCA2065, IPQ8068, IPQ6010, WCN6740, IPQ4029, FastConnect 6800, Immersive Home 216 Platform, IPQ8078A, IPQ8070A, Snapdragon 780G 5G Mobile Platform, Snapdragon 782G Mobile Platform (SM7325-AF), Snapdragon 888 5G Mobile Platform, SXR2130, WSA8810, QCN5024, QCA9886, AQT1000, QCN9003, Snapdragon XR2 5G Platform, Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB), CSR8811, SDX55, Snapdragon 690 5G Mobile Platform, SA8295P, QCA2062, QCA8082, Snapdragon 765G 5G Mobile Platform (SM7250-AB), SD660, SXR1230P, Snapdragon 8cx Gen 2 5G Compute Platform (SC8180XP-AA, AB), Snapdragon 636 Mobile Platform, WCD9360, FastConnect 6700, Snapdragon 480 5G Mobile Platform, CSRB31024, QCA9986, QCA9992, IPQ8074, QCA8081, SA8155P, Snapdragon 778G 5G Mobile Platform, WCN3980, QCS4490, Snapdragon 480+ 5G Mobile Platform (SM4350-AC), Snapdragon W5+ Gen 1 Wearable Platform, IPQ4028, QCA6426, QCA6391, IPQ6000
Description
Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload.
Gravité et risque d'exploitation
CVE-2023-28549 obtient un score CVSS de 7.8/10, soit une gravité élevée. Selon le modèle EPSS, la probabilité qu'elle soit exploitée dans les 30 prochains jours est de 0.12 %, ce qui la place devant 1.5 % des CVE référencées.
Que faire ?
- Vérifiez si Snapdragon (versions IPQ9008, QCN5124, IPQ8065, SSG2125P, QCA8337, QCA6431, Snapdragon 8cx Compute Platform (SC8180XP-AC, AF) "Poipu Pro", QCA1064, QCN9100, SC8180X+SDX55, Snapdragon 865+ 5G Mobile Platform (SM8250-AB), WSA8832, WSA8835, QCA6574A, QCN9000, IPQ8076, QCA6678AQ, SM7315, QCN5054, QCA6420, QCN9074, QCN6132, SA6155P, WCD9370, SD888, WCD9385, QCN5052, QCA8072, QCA6696, Snapdragon 695 5G Mobile Platform, Snapdragon 750G 5G Mobile Platform, QCN6100, IPQ8071A, Snapdragon 778G+ 5G Mobile Platform (SM7325-AE), SA8150P, Snapdragon 8c Compute Platform (SC8180X-AD) "Poipu Lite", SA6150P, QCA6574AU, QCA9984, QCN9011, Snapdragon 865 5G Mobile Platform, WCN3990, Snapdragon Auto 5G Modem-RF, QCA9889, IPQ6018, QCN9012, QCA8084, QAM8295P, QCA2066, QCN5154, WCN3988, QCA6320, QCA6564AU, QCN9002, SD 455, QCA6564A, QCS6490, Snapdragon 835 Mobile PC Platform, Immersive Home 316 Platform, Snapdragon 8c Compute Platform (SC8180XP-AD) "Poipu Lite", QCA9994, WCD9380, QCA9898, QCM4490, SA6155, WSA8830, IPQ6028, QSM8250, Qualcomm Robotics RB5 Platform, FastConnect 7800, QCN9022, IPQ8072, Snapdragon 8cx Compute Platform (SC8180X-AA, AB), QCN5152, QSM8350, QCA6698AQ, QCN6112, QCA9980, QCS8250, QCA4024, IPQ5010, Snapdragon 7c+ Gen 3 Compute, Snapdragon 8+ Gen 1 Mobile Platform, SSG2115P, SW5100, WSA8815, QCA6595AU, Snapdragon XR2+ Gen 1 Platform, QCA8085, QCM6490, QRB5165N, SA8155, IPQ8074A, QCN5021, QCA9985, QCA6421, IPQ8070, SA4150P, SD835, QCN9001, QCN9024, IPQ8078, IPQ8071, QCN5164, QCA9990, SM7325P, Snapdragon Auto 4G Modem, Immersive Home 214 Platform, WCD9341, QCA6584AU, Snapdragon 888+ 5G Mobile Platform (SM8350-AC), Snapdragon 8cx Gen 2 5G Compute Platform (SC8180X-AC, AF) "Poipu Pro", Snapdragon X65 5G Modem-RF System, QCA6438, QCN5064, Snapdragon 870 5G Mobile Platform (SM8250-AC), AR9380, SM4450, QCN5022, SM7250P, QCN9274, Snapdragon 660 Mobile Platform, SW5100P, IPQ8064, IPQ8173, WCN3950, SA8145P, WCD9340, QRB5165M, Snapdragon X55 5G Modem-RF System, QCA2064, WCD9375, Snapdragon 630 Mobile Platform, Flight RB5 5G Platform, SD 8 Gen1 5G, Snapdragon 8 Gen 1 Mobile Platform, SA8195P, QCA1062, FastConnect 6200, IPQ4018, Snapdragon AR2 Gen 1 Platform, SXR2230P, IPQ8076A, IPQ5028, QCN9072, QCA6430, SD865 5G, QCN6023, Immersive Home 318 Platform, QCA6428, QCA9888, IPQ8174, QCA6554A, PMP8074, FastConnect 6900, IPQ4019, QCA6574, QCN6122, Snapdragon 765 5G Mobile Platform (SM7250-AA), IPQ9574, 315 5G IoT Modem, QCA7500, AR8035, QCA6436, QCA9880, QCA8075, Snapdragon 4 Gen 1 Mobile Platform, IPQ8072A, QCN5550, WCD9335, QCA6310, QCN5122, QCN9070, SA6145P, QCN6102, Snapdragon 768G 5G Mobile Platform (SM7250-AC), QCA6595, QCA8386, QCN6024, QCA2065, IPQ8068, IPQ6010, WCN6740, IPQ4029, FastConnect 6800, Immersive Home 216 Platform, IPQ8078A, IPQ8070A, Snapdragon 780G 5G Mobile Platform, Snapdragon 782G Mobile Platform (SM7325-AF), Snapdragon 888 5G Mobile Platform, SXR2130, WSA8810, QCN5024, QCA9886, AQT1000, QCN9003, Snapdragon XR2 5G Platform, Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB), CSR8811, SDX55, Snapdragon 690 5G Mobile Platform, SA8295P, QCA2062, QCA8082, Snapdragon 765G 5G Mobile Platform (SM7250-AB), SD660, SXR1230P, Snapdragon 8cx Gen 2 5G Compute Platform (SC8180XP-AA, AB), Snapdragon 636 Mobile Platform, WCD9360, FastConnect 6700, Snapdragon 480 5G Mobile Platform, CSRB31024, QCA9986, QCA9992, IPQ8074, QCA8081, SA8155P, Snapdragon 778G 5G Mobile Platform, WCN3980, QCS4490, Snapdragon 480+ 5G Mobile Platform (SM4350-AC), Snapdragon W5+ Gen 1 Wearable Platform, IPQ4028, QCA6426, QCA6391, IPQ6000) est présent sur votre parc.
- Appliquez le correctif ou la version corrigée indiqués dans les références de l'éditeur.
- À défaut de correctif, limitez l'exposition (filtrage réseau, désactivation du composant).
- Automatisez la détection : les agents CVE Heimdall (gratuits, open source) corrèlent l'inventaire de vos serveurs avec la base CVE.