CVE-2023-28551: Qualcomm 315 5g IoT Modem Firmware

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.

Affected products

• Qualcomm 315 5g IoT Modem Firmware: affected versions not specified
• Qualcomm 9205 Lte Modem Firmware: affected versions not specified
• Qualcomm 9206 Lte Modem Firmware: affected versions not specified
• Qualcomm 9207 Lte Modem Firmware: affected versions not specified
• Qualcomm APQ8017 Firmware: affected versions not specified
• Qualcomm APQ8037 Firmware: affected versions not specified
• Qualcomm AQT1000 Firmware: affected versions not specified
• Qualcomm AR8035 Firmware: affected versions not specified
• Qualcomm C-v2x 9150 Firmware: affected versions not specified
• Qualcomm CSRA6620 Firmware: affected versions not specified
• Qualcomm CSRA6640 Firmware: affected versions not specified
• Qualcomm CSRB31024 Firmware: affected versions not specified
• Qualcomm Fastconnect 6200 Firmware: affected versions not specified
• Qualcomm Fastconnect 6700 Firmware: affected versions not specified
• Qualcomm Fastconnect 6800 Firmware: affected versions not specified
• Qualcomm Fastconnect 6900 Firmware: affected versions not specified
• Qualcomm Fastconnect 7800 Firmware: affected versions not specified
• Qualcomm FSM10055 Firmware: affected versions not specified
• Qualcomm MDM8207 Firmware: affected versions not specified
• Qualcomm MDM9205S Firmware: affected versions not specified
• Qualcomm MDM9250 Firmware: affected versions not specified
• Qualcomm MDM9628 Firmware: affected versions not specified
• Qualcomm MDM9640 Firmware: affected versions not specified
• Qualcomm MSM8108 Firmware: affected versions not specified
• Qualcomm MSM8209 Firmware: affected versions not specified
• and 223 more

Published 2023-12-05. Last modified 2026-06-17.