CVE-2023-28577: Qualcomm Fastconnect 6800 Firmware

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used. So when a function called cam_mem_get_cpu_buf to get the kernel va to use, another thread can call CAM_REQ_MGR_RELEASE_BUF to unmap the kernel va which cause UAF of the kernel address.

Affected products

  • Qualcomm Fastconnect 6800 Firmware: affected versions not specified
  • Qualcomm Fastconnect 6900 Firmware: affected versions not specified
  • Qualcomm Fastconnect 7800 Firmware: affected versions not specified
  • Qualcomm QCA6391 Firmware: affected versions not specified
  • Qualcomm QCA6426 Firmware: affected versions not specified
  • Qualcomm QCA6436 Firmware: affected versions not specified
  • Qualcomm QCN9074 Firmware: affected versions not specified
  • Qualcomm QCS410 Firmware: affected versions not specified
  • Qualcomm QCS610 Firmware: affected versions not specified
  • Qualcomm SD865 5g Firmware: affected versions not specified
  • Qualcomm Snapdragon 865+ 5g Firmware: affected versions not specified
  • Qualcomm Snapdragon 865 5g Firmware: affected versions not specified
  • Qualcomm Snapdragon 870 5g Firmware: affected versions not specified
  • Qualcomm Snapdragon 8 Gen 1 Firmware: affected versions not specified
  • Qualcomm Snapdragon x55 5g Firmware: affected versions not specified
  • Qualcomm Snapdragon XR2 5g Firmware: affected versions not specified
  • Qualcomm SW5100 Firmware: affected versions not specified
  • Qualcomm SW5100P Firmware: affected versions not specified
  • Qualcomm SXR2130 Firmware: affected versions not specified
  • Qualcomm WCD9341 Firmware: affected versions not specified
  • Qualcomm WCD9370 Firmware: affected versions not specified
  • Qualcomm WCD9380 Firmware: affected versions not specified
  • Qualcomm WCN3660B Firmware: affected versions not specified
  • Qualcomm WCN3680B Firmware: affected versions not specified
  • Qualcomm WCN3950 Firmware: affected versions not specified
  • and 6 more

Published 2023-08-08. Last modified 2026-06-17.