CVE-2023-28581
Published Sep 5, 2023Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE.
- evidence mentions
- 1
- Buzz score
- 11.9
Vendor/product archive
3 CVEs tagged to qualcomm / snapdragon_865_5g — 1 Critical, 0 High, 2 Medium, 0 Low, 0 Unrated.
Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE.
In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used. So when a function called cam_mem_get_cpu_buf to get the kernel va to use, a…
The buffer obtained from kernel APIs such as cam_mem_get_cpu_buf() may be readable/writable in userspace after kernel accesses it. In other words, user mode may race and modify th…