CVE-2023-28580: Qualcomm AR8035 Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache.

Affected products

• Qualcomm AR8035 Firmware: affected versions not specified
• Qualcomm Fastconnect 6900 Firmware: affected versions not specified
• Qualcomm Fastconnect 7800 Firmware: affected versions not specified
• Qualcomm QAM8295P Firmware: affected versions not specified
• Qualcomm QCA6391 Firmware: affected versions not specified
• Qualcomm QCA6574AU Firmware: affected versions not specified
• Qualcomm QCA6595AU Firmware: affected versions not specified
• Qualcomm QCA6696 Firmware: affected versions not specified
• Qualcomm QCA8081 Firmware: affected versions not specified
• Qualcomm QCA8337 Firmware: affected versions not specified
• Qualcomm QCC710 Firmware: affected versions not specified
• Qualcomm QCN6224 Firmware: affected versions not specified
• Qualcomm QCN6274 Firmware: affected versions not specified
• Qualcomm QCS410 Firmware: affected versions not specified
• Qualcomm QCS610 Firmware: affected versions not specified
• Qualcomm QFW7114 Firmware: affected versions not specified
• Qualcomm QFW7124 Firmware: affected versions not specified
• Qualcomm SA6145P Firmware: affected versions not specified
• Qualcomm SA6150P Firmware: affected versions not specified
• Qualcomm SA6155P Firmware: affected versions not specified
• Qualcomm SA8145P Firmware: affected versions not specified
• Qualcomm SA8150P Firmware: affected versions not specified
• Qualcomm SA8155P Firmware: affected versions not specified
• Qualcomm SA8195P Firmware: affected versions not specified
• Qualcomm SA8295P Firmware: affected versions not specified
• and 19 more

Published 2023-12-05. Last modified 2026-06-17.