CVE-2023-28576: Qualcomm Fastconnect 6800 Firmware

High severity, CVSS 7.0. EPSS: 0.1% chance of exploitation in the next 30 days.

The buffer obtained from kernel APIs such as cam_mem_get_cpu_buf() may be readable/writable in userspace after kernel accesses it. In other words, user mode may race and modify the packet header (e.g. header.count), causing checks (e.g. size checks) in kernel code to be invalid. This may lead to out-of-bounds read/write issues.

Affected products

Qualcomm Fastconnect 6800 Firmware: affected versions not specified
Qualcomm Fastconnect 6900 Firmware: affected versions not specified
Qualcomm Fastconnect 7800 Firmware: affected versions not specified
Qualcomm QCA6391 Firmware: affected versions not specified
Qualcomm QCA6426 Firmware: affected versions not specified
Qualcomm QCA6436 Firmware: affected versions not specified
Qualcomm QCN9074 Firmware: affected versions not specified
Qualcomm QCS410 Firmware: affected versions not specified
Qualcomm QCS610 Firmware: affected versions not specified
Qualcomm SD865 5g Firmware: affected versions not specified
Qualcomm Snapdragon 865+ 5g Firmware: affected versions not specified
Qualcomm Snapdragon 865 5g Firmware: affected versions not specified
Qualcomm Snapdragon 870 5g Firmware: affected versions not specified
Qualcomm Snapdragon 8 Gen 1 Firmware: affected versions not specified
Qualcomm Snapdragon x55 5g Firmware: affected versions not specified
Qualcomm Snapdragon XR2 5g Firmware: affected versions not specified
Qualcomm SW5100 Firmware: affected versions not specified
Qualcomm SW5100P Firmware: affected versions not specified
Qualcomm SXR2130 Firmware: affected versions not specified
Qualcomm WCD9341 Firmware: affected versions not specified
Qualcomm WCD9370 Firmware: affected versions not specified
Qualcomm WCD9380 Firmware: affected versions not specified
Qualcomm WCN3660B Firmware: affected versions not specified
Qualcomm WCN3680B Firmware: affected versions not specified
Qualcomm WCN3950 Firmware: affected versions not specified
and 6 more

Published 2023-08-08. Last modified 2026-06-17.