CVE-2023-28582: Qualcomm AR8035 Firmware

Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake.

Affected products

• Qualcomm AR8035 Firmware: affected versions not specified
• Qualcomm Fastconnect 6700 Firmware: affected versions not specified
• Qualcomm Fastconnect 6900 Firmware: affected versions not specified
• Qualcomm Fastconnect 7800 Firmware: affected versions not specified
• Qualcomm QCA6584AU Firmware: affected versions not specified
• Qualcomm QCA6698AQ Firmware: affected versions not specified
• Qualcomm QCA8081 Firmware: affected versions not specified
• Qualcomm QCA8337 Firmware: affected versions not specified
• Qualcomm QCC710 Firmware: affected versions not specified
• Qualcomm QCM4490 Firmware: affected versions not specified
• Qualcomm QCM8550 Firmware: affected versions not specified
• Qualcomm QCN6024 Firmware: affected versions not specified
• Qualcomm QCN6224 Firmware: affected versions not specified
• Qualcomm QCN6274 Firmware: affected versions not specified
• Qualcomm QCN9024 Firmware: affected versions not specified
• Qualcomm QCS4490 Firmware: affected versions not specified
• Qualcomm QFW7114 Firmware: affected versions not specified
• Qualcomm QFW7124 Firmware: affected versions not specified
• Qualcomm SM8550P Firmware: affected versions not specified
• Qualcomm Snapdragon 4 Gen 2 Mobile Firmware: affected versions not specified
• Qualcomm Snapdragon 8+ Gen 2 Mobile Firmware: affected versions not specified
• Qualcomm Snapdragon 8 Gen 2 Mobile Firmware: affected versions not specified
• Qualcomm Snapdragon 8 Gen 3 Mobile Firmware: affected versions not specified
• Qualcomm Snapdragon Auto 5g Modem-Rf Gen 2 Firmware: affected versions not specified
• Qualcomm Snapdragon x65 5g Modem-Rf Firmware: affected versions not specified
• and 18 more

Published 2024-03-04. Last modified 2026-06-17.