CVE-2023-28543: Out of Bounds read in SNPE Library
Published Sep 5, 2023
·Updated
A malformed DLC can trigger Memory Corruption in SNPE library due to out of bounds read, such as by loading an untrusted model (e.g. from a remote source).
Affected Software
16 affected components
All of the following
QUALCOMM Sd855
Qualcomm Sd855 Firmware
All of the following
QUALCOMM Sd845
QUALCOMM Sd845 Firmware
All of the following
QUALCOMM QCS605
QUALCOMM Qcs605 Firmware
All of the following
QUALCOMM QCS405
QUALCOMM Qcs405 Firmware
Qualcomm Sd855 Firmware
QUALCOMM Sd855
QUALCOMM Sd845 Firmware
QUALCOMM Sd845
QUALCOMM Qcs605 Firmware
QUALCOMM QCS605
QUALCOMM Qcs405 Firmware
QUALCOMM QCS405
Event History
Sep 5, 2023
CVE Published
via MITRE·06:29 AM
Data Sourced
via MITRE·06:29 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-28543?
The severity of CVE-2023-28543 is critical.
2
How does CVE-2023-28543 affect the affected software?
CVE-2023-28543 affects the affected software by triggering memory corruption.
3
How can CVE-2023-28543 be exploited?
CVE-2023-28543 can be exploited by loading a malformed DLC or untrusted model.
4
Which software is affected by CVE-2023-28543?
The software affected by CVE-2023-28543 includes Google Android (Qualcomm SD855 Firmware) and Qualcomm Qcs605 Firmware.
5
Is CVE-2023-28543 fixed?
Please refer to the official reference link for information on fixes and patches for CVE-2023-28543.