CVE-2023-28543: Qualcomm QCS405 Firmware

Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days.

A malformed DLC can trigger Memory Corruption in SNPE library due to out of bounds read, such as by loading an untrusted model (e.g. from a remote source).

Affected products

• Qualcomm QCS405 Firmware: affected versions not specified
• Qualcomm QCS605 Firmware: affected versions not specified
• Qualcomm SD845 Firmware: affected versions not specified
• Qualcomm SD855 Firmware: affected versions not specified

Published 2023-09-05. Last modified 2026-06-17.