CVE-2023-28575: Qualcomm 205 Firmware

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handle is passed to it.

Affected products

• Qualcomm 205 Firmware: affected versions not specified
• Qualcomm 215 Firmware: affected versions not specified
• Qualcomm AQT1000 Firmware: affected versions not specified
• Qualcomm C-v2x 9150 Firmware: affected versions not specified
• Qualcomm Fastconnect 6200 Firmware: affected versions not specified
• Qualcomm Fastconnect 6800 Firmware: affected versions not specified
• Qualcomm Fastconnect 6900 Firmware: affected versions not specified
• Qualcomm Fastconnect 7800 Firmware: affected versions not specified
• Qualcomm QAM8295P Firmware: affected versions not specified
• Qualcomm QCA6391 Firmware: affected versions not specified
• Qualcomm QCA6420 Firmware: affected versions not specified
• Qualcomm QCA6426 Firmware: affected versions not specified
• Qualcomm QCA6430 Firmware: affected versions not specified
• Qualcomm QCA6436 Firmware: affected versions not specified
• Qualcomm QCA6574AU Firmware: affected versions not specified
• Qualcomm QCA6696 Firmware: affected versions not specified
• Qualcomm QCA8337 Firmware: affected versions not specified
• Qualcomm QCN9074 Firmware: affected versions not specified
• Qualcomm QCS410 Firmware: affected versions not specified
• Qualcomm QCS610 Firmware: affected versions not specified
• Qualcomm QCS8155 Firmware: affected versions not specified
• Qualcomm SA6145P Firmware: affected versions not specified
• Qualcomm SA6150P Firmware: affected versions not specified
• Qualcomm SA6155P Firmware: affected versions not specified
• Qualcomm SA8145P Firmware: affected versions not specified
• and 35 more

Published 2023-08-08. Last modified 2026-06-17.