CVE-2023-28553: Buffer Over-read in WLAN Host
Information Disclosure in WLAN Host when processing WMI event command.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2023-11-05
Event History
Frequently Asked Questions
What is the severity of CVE-2023-28553?
The severity of CVE-2023-28553 ranges from moderate to high based on the potential for information disclosure.
How do I fix CVE-2023-28553?
To fix CVE-2023-28553, update the affected Qualcomm firmware to the latest version as provided by the manufacturer.
What systems are affected by CVE-2023-28553?
CVE-2023-28553 affects various Qualcomm devices, particularly those running specific versions of firmware related to WLAN hosts.
Is CVE-2023-28553 actively exploited?
As of now, there is no known active exploitation of CVE-2023-28553 reported in the wild.
What kind of information does CVE-2023-28553 disclose?
CVE-2023-28553 can lead to unauthorized information disclosure through improperly handled WMI event commands on affected devices.