CVE-2023-28537: Qualcomm 315 5g IoT Modem Firmware

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

Memory corruption while allocating memory in COmxApeDec module in Audio.

Affected products

• Qualcomm 315 5g IoT Modem Firmware: affected versions not specified
• Qualcomm 8098 Firmware: affected versions not specified
• Qualcomm 8998 Firmware: affected versions not specified
• Qualcomm APQ5053-Aa Firmware: affected versions not specified
• Qualcomm APQ8009 Firmware: affected versions not specified
• Qualcomm APQ8017 Firmware: affected versions not specified
• Qualcomm APQ8053-Aa Firmware: affected versions not specified
• Qualcomm APQ8053-Ac Firmware: affected versions not specified
• Qualcomm AQT1000 Firmware: affected versions not specified
• Qualcomm AR8031 Firmware: affected versions not specified
• Qualcomm AR8035 Firmware: affected versions not specified
• Qualcomm CSRA6620 Firmware: affected versions not specified
• Qualcomm CSRA6640 Firmware: affected versions not specified
• Qualcomm CSRB31024 Firmware: affected versions not specified
• Qualcomm Flight RB5 5g Platform Firmware: affected versions not specified
• Qualcomm MDM9628 Firmware: affected versions not specified
• Qualcomm MSM8108 Firmware: affected versions not specified
• Qualcomm MSM8208 Firmware: affected versions not specified
• Qualcomm MSM8209 Firmware: affected versions not specified
• Qualcomm MSM8608 Firmware: affected versions not specified
• Qualcomm MSM8917 Firmware: affected versions not specified
• Qualcomm MSM8996AU Firmware: affected versions not specified
• Qualcomm QAM8295P Firmware: affected versions not specified
• Qualcomm QCA4020 Firmware: affected versions not specified
• Qualcomm QCA4024 Firmware: affected versions not specified
• and 158 more

Published 2023-08-08. Last modified 2026-06-17.