Local modem compromise via DMA buffer over-read
Published Jul 4, 2023 · Updated Aug 2, 2024
A buffer over-read in Qualcomm Snapdragon Data Modem firmware allows local users with low privileges to corrupt modem memory via a DMA event. The Data Modem mishandles a DMA buffer release event for channel-frequency-response data and reads beyond the allocated buffer. Reachability requires local low-privileged access; successful exploitation can expose or alter modem-resident data and interrupt modem operation.
CVSS severity7.8
HighEPSS probability0.12%
Next 30 days · Sep 16, 2026Known exploitationUnconfirmed
Based on sourced intelligenceHinoki checkNot available
Coverage for this vulnerabilitySummary
What happened
A buffer over-read in Qualcomm Snapdragon Data Modem firmware allows local users with low privileges to corrupt modem memory via a DMA event. The Data Modem mishandles a DMA buffer release event for channel-frequency-response data and reads beyond the allocated buffer. Reachability requires local low-privileged access; successful exploitation can expose or alter modem-resident data and interrupt modem operation.
The record
- CVE
- CVE-2023-28541
- Published
- Jul 4, 2023
- Updated
- Aug 2, 2024
- Vendor
- Qualcomm
- Product
- Robotics RB3 Platform Firmware
- Classifications
- CWE-125, CWE-126
- Attack vector
- local
- Privileges
- authenticated
Timeline
How it unfolded
- Jul 4, 2023CVE publishedPublication date reported by the CVE source.
- Aug 2, 2024Record updatedLatest update available in the CVE record.
Exploitability
Present is not the same as exploitable
Compare your product and version with the public record. A matching version still requires validation against your environment.
Is a vulnerable build present?
Compare these published version ranges with your installed build and any vendor patches.
- Affected versionversion=0 <=*
What conditions does exploitation require?
Attack vectorlocal
Required privilegesauthenticated
What is affected?
Qualcomm · Robotics RB3 Platform Firmwareversion=0 <=*
Qualcomm · Snapdragon Wear 2500 Platform Firmwareversion=0 <=*
Qualcomm · SA8155P Firmwareversion=0 <=*
Qualcomm · QCN9074 Firmwareversion=0 <=*
Qualcomm · Qualcomm SDX65M Firmwareversion=0 <=*
Qualcomm · Qualcomm WCN3660B Firmwareversion=0 <=*
Qualcomm · QCN7606 Firmwareversion=0 <=*
Qualcomm · Qualcomm QRB5165N Firmwareversion=0 <=*
Qualcomm · Qualcomm SDX20M Firmwareversion=0 <=*
Qualcomm · QCA6698AQ Firmwareversion=0 <=*
Qualcomm · SW5100 Firmwareversion=0 <=*
Qualcomm · SW5100P Firmwareversion=0 <=*
Qualcomm · QCA8386 Firmwareversion=0 <=*
Qualcomm · QAM8255P Firmwareversion=0 <=*
Qualcomm · QCA8072 Firmwareversion=0 <=*
Qualcomm · Qualcomm QCA6431 Firmwareversion=0 <=*
Qualcomm · QCN9002 Firmwareversion=0 <=*
Qualcomm · Flight RB5 5G Platform Firmwareversion=0 <=*
Qualcomm · IPQ6000 Firmwareversion=0 <=*
Qualcomm · Qualcomm QCA6595AU Firmwareversion=0 <=*
Qualcomm · CSRB31024 Firmwareversion=0 <=*
Qualcomm · IPQ8078 Firmwareversion=0 <=*
Qualcomm · Qualcomm WCD9375 Firmwareversion=0 <=*
Qualcomm · Qualcomm Snapdragon 820 Automotive Platform Firmwareversion=0 <=*
Qualcomm · Qualcomm QCA6678AQ Firmwareversion=0 <=*
Qualcomm · Qualcomm MSM8909W Firmwareversion=0 <=*
Qualcomm · QCN5052 Firmwareversion=0 <=*
Qualcomm · QCS610 Firmwareversion=0 <=*
Qualcomm · CSR8811 Firmwareversion=0 <=*
Qualcomm · Immersive Home 318 Platform Firmwareversion=0 <=*
Qualcomm · Snapdragon Auto 5G Modem-RF Firmwareversion=0 <=*
Qualcomm · Snapdragon Auto 4G Modem Firmwareversion=0 <=*
Qualcomm · QCA8084 Firmwareversion=0 <=*
Qualcomm · CSRA6620 Firmwareversion=0 <=*
Qualcomm · WSA8810 Firmwareversion=0 <=*
Qualcomm · QCN6122 Firmwareversion=0 <=*
Qualcomm · QCA8337 Firmwareversion=0 <=*
Qualcomm · IPQ6010 Firmwareversion=0 <=*
Qualcomm · Qualcomm Snapdragon 429 Mobile Platform Firmwareversion=0 <=*
Qualcomm · Qualcomm QCA6426 Firmwareversion=0 <=*
Qualcomm · Qualcomm QCA6797AQ Firmwareversion=0 <=*
Qualcomm · SA6150P Firmwareversion=0 <=*
Qualcomm · QCA8081 Firmwareversion=0 <=*
Qualcomm · IPQ8070A Firmwareversion=0 <=*
Qualcomm · FastConnect 7800 Firmwareversion=0 <=*
Qualcomm · QCN9001 Firmwareversion=0 <=*
Qualcomm · QCA9994 Firmwareversion=0 <=*
Qualcomm · Qualcomm QCA6595 Firmwareversion=0 <=*
Qualcomm · QCA6320 Firmwareversion=0 <=*
Qualcomm · QCA9886 Firmwareversion=0 <=*
Qualcomm · WCD9360 Firmwareversion=0 <=*
Qualcomm · QCA9898 Firmwareversion=0 <=*
Qualcomm · QCS410 Firmwareversion=0 <=*
Qualcomm · IPQ8078A Firmwareversion=0 <=*
Qualcomm · SA8195P Firmwareversion=0 <=*
Qualcomm · QCN5022 Firmwareversion=0 <=*
Qualcomm · IPQ5028 Firmwareversion=0 <=*
Qualcomm · CSRA6640 Firmwareversion=0 <=*
Qualcomm · Snapdragon X65 5G Modem-RF System Firmwareversion=0 <=*
Qualcomm · IPQ8174 Firmwareversion=0 <=*
Qualcomm · QCN9022 Firmwareversion=0 <=*
Qualcomm · Qualcomm IPQ8068 Firmwareversion=0 <=*
Qualcomm · IPQ6028 Firmwareversion=0 <=*
Qualcomm · QCN9274 Firmwareversion=0 <=*
Qualcomm · QCM6490 Firmwareversion=0 <=*
Qualcomm · Snapdragonversion=AQT1000; version=AR8031; version=AR9380; version=CSR8811; version=CSRA6620; version=CSRA6640; version=CSRB31024; version=C-V2X 9150; version=FastConnect 6200; version=FastConnect 6700; version=FastConnect 6800; version=FastConnect 6900; version=FastConnect 7800; version=Flight RB5 5G Platform; version=Immersive Home 214 Platform; version=Immersive Home 216 Platform; version=Immersive Home 316 Platform; version=Immersive Home 318 Platform; version=IPQ4018; version=IPQ4019; version=IPQ4028; version=IPQ4029; version=IPQ5010; version=IPQ5028; version=IPQ6000; version=IPQ6010; version=IPQ6018; version=IPQ6028; version=IPQ8064; version=IPQ8065; version=IPQ8068; version=IPQ8070; version=IPQ8070A; version=IPQ8071A; version=IPQ8072A; version=IPQ8074A; version=IPQ8076; version=IPQ8076A; version=IPQ8078; version=IPQ8078A; version=IPQ8173; version=IPQ8174; version=IPQ9008; version=IPQ9574; version=MDM9250; version=MDM9628; version=MDM9640; version=MDM9650; version=MSM8909W; version=QAM8255P; version=QAM8295P; version=QCA4024; version=QCA6174A; version=QCA6175A; version=QCA6310; version=QCA6320; version=QCA6335; version=QCA6391; version=QCA6420; version=QCA6421; version=QCA6426; version=QCA6430; version=QCA6431; version=QCA6436; version=QCA6554A; version=QCA6564A; version=QCA6564AU; version=QCA6574; version=QCA6574A; version=QCA6574AU; version=QCA6584AU; version=QCA6595; version=QCA6595AU; version=QCA6678AQ; version=QCA6696; version=QCA6698AQ; version=QCA6797AQ; version=QCA7500; version=QCA8072; version=QCA8075; version=QCA8081; version=QCA8082; version=QCA8084; version=QCA8085; version=QCA8337; version=QCA8386; version=QCA9377; version=QCA9880; version=QCA9886; version=QCA9888; version=QCA9889; version=QCA9898; version=QCA9980; version=QCA9984; version=QCA9985; version=QCA9990; version=QCA9992; version=QCA9994; version=QCM6125; version=QCM6490; version=QCN5022; version=QCN5024; version=QCN5052; version=QCN5054; version=QCN5122; version=QCN5124; version=QCN5152; version=QCN5154; version=QCN5164; version=QCN6023; version=QCN6024; version=QCN6122; version=QCN6132; version=QCN7605; version=QCN7606; version=QCN9000; version=QCN9001; version=QCN9002; version=QCN9003; version=QCN9011; version=QCN9012; version=QCN9022; version=QCN9024; version=QCN9070; version=QCN9072; version=QCN9074; version=QCN9100; version=QCN9274; version=QCS410; version=QCS610; version=QCS6125; version=QCS6490; version=QRB5165M; version=QRB5165N; version=Qualcomm Video Collaboration VC1 Platform; version=Qualcomm Video Collaboration VC3 Platform; version=Robotics RB3 Platform; version=Robotics RB5 Platform; version=SA6145P; version=SA6150P; version=SA6155P; version=SA8145P; version=SA8150P; version=SA8155P; version=SA8195P; version=SA8255P; version=SA8295P; version=SD660; version=SD835; version=SD855; version=SD865 5G; version=SDM429W; version=SDX20M; version=SDX55; version=SDX65M; version=Smart Audio 400 Platform; version=Snapdragon 429 Mobile Platform; version=Snapdragon 660 Mobile Platform; version=Snapdragon 665 Mobile Platform; version=Snapdragon 820 Automotive Platform; version=Snapdragon 835 Mobile PC Platform; version=Snapdragon 845 Mobile Platform; version=Snapdragon 855+/860 Mobile Platform (SM8150-AC); version=Snapdragon 855 Mobile Platform; version=Snapdragon 865 5G Mobile Platform; version=Snapdragon 865+ 5G Mobile Platform (SM8250-AB); version=Snapdragon 870 5G Mobile Platform (SM8250-AC); version=Snapdragon 8 Gen 1 Mobile Platform; version=Snapdragon Auto 4G Modem; version=Snapdragon Auto 5G Modem-RF; version=Snapdragon W5+ Gen 1 Wearable Platform; version=Snapdragon Wear 2100 Platform; version=Snapdragon Wear 2500 Platform; version=Snapdragon Wear 3100 Platform; version=Snapdragon X20 LTE Modem; version=Snapdragon X55 5G Modem-RF System; version=Snapdragon X65 5G Modem-RF System; version=Snapdragon XR2 5G Platform; version=SW5100; version=SW5100P; version=SXR2130; version=WCD9335; version=WCD9340; version=WCD9341; version=WCD9360; version=WCD9370; version=WCD9375; version=WCD9380; version=WCD9385; version=WCN3620; version=WCN3660B; version=WCN3950; version=WCN3980; version=WCN3988; version=WCN3990; version=WSA8810; version=WSA8815; version=WSA8830; version=WSA8835
Qualcomm · SA6155P Firmwareversion=0 <=*
Qualcomm · Qualcomm SD835 Firmwareversion=0 <=*
Qualcomm · QCA7500 Firmwareversion=0 <=*
Qualcomm · Qualcomm Snapdragon 865 5G Mobile Platform Firmwareversion=0 <=*
Qualcomm · Qualcomm Snapdragon 835 Mobile PC Platform Firmwareversion=0 <=*
Qualcomm · Qualcomm Snapdragon 845 Mobile Platform Firmwareversion=0 <=*
Qualcomm · Qualcomm Snapdragon 8 Gen 1 Mobile Platform Firmwareversion=0 <=*
Qualcomm · IPQ8071A Firmwareversion=0 <=*
Qualcomm · SA8255P Firmwareversion=0 <=*
Qualcomm · QCA6421 Firmwareversion=0 <=*
Qualcomm · QCS6490 Firmwareversion=0 <=*
Qualcomm · Qualcomm SD855 Firmwareversion=0 <=*
Qualcomm · SA8295P Firmwareversion=0 <=*
Qualcomm · Qualcomm IPQ8065 Firmwareversion=0 <=*
Qualcomm · SA8145P Firmwareversion=0 <=*
Qualcomm · FastConnect 6700 Firmwareversion=0 <=*
Qualcomm · Qualcomm QCA6564A Firmwareversion=0 <=*
Qualcomm · Qualcomm Video Collaboration VC1 Platform Firmwareversion=0 <=*
Qualcomm · FastConnect 6900 Firmwareversion=0 <=*
Qualcomm · QCA6554A Firmwareversion=0 <=*
Qualcomm · QCA9990 Firmwareversion=0 <=*
Qualcomm · Qualcomm QCA9377 Firmwareversion=0 <=*
Qualcomm · WCD9370 Firmwareversion=0 <=*
Qualcomm · IPQ8076 Firmwareversion=0 <=*
Qualcomm · QCA9888 Firmwareversion=0 <=*
Qualcomm · Snapdragon Wear 2100 Platform Firmwareversion=0 <=*
Qualcomm · SA8150P Firmwareversion=0 <=*
Qualcomm · Qualcomm QRB5165M Firmwareversion=0 <=*
Qualcomm · QCA6420 Firmwareversion=0 <=*
Qualcomm · IPQ8076A Firmwareversion=0 <=*
Qualcomm · Qualcomm Snapdragon 660 Mobile Platform Firmwareversion=0 <=*
Qualcomm · Qualcomm Smart Audio 400 Platform Firmwareversion=0 <=*
Qualcomm · Qualcomm WCD9341 Firmwareversion=0 <=*
Qualcomm · Immersive Home 214 Platform Firmwareversion=0 <=*
Qualcomm · Snapdragon X55 5G Modem-RF System Firmwareversion=0 <=*
Qualcomm · IPQ6018 Firmwareversion=0 <=*
Qualcomm · Qualcomm QCA6564AU Firmwareversion=0 <=*
Qualcomm · Qualcomm IPQ4019 Firmwareversion=0 <=*
Qualcomm · WCN3988 Firmwareversion=0 <=*
Qualcomm · QCA6175A Firmwareversion=0 <=*
Qualcomm · C-V2X 9150 Firmwareversion=0 <=*
Qualcomm · Qualcomm Snapdragon 855 Mobile Platform Firmwareversion=0 <=*
Qualcomm · Qualcomm IPQ4028 Firmwareversion=0 <=*
Qualcomm · QAM8295P Firmwareversion=0 <=*
Qualcomm · QCN7605 Firmwareversion=0 <=*
Qualcomm · Qualcomm QCA6436 Firmwareversion=0 <=*
Qualcomm · AR8031 Firmwareversion=0 <=*
Qualcomm · QCA6574AU Firmwareversion=0 <=*
Qualcomm · Immersive Home 316 Platform Firmwareversion=0 <=*
Qualcomm · AR9380 Firmwareversion=0 <=*
Qualcomm · QCN5054 Firmwareversion=0 <=*
Qualcomm · QCA9984 Firmwareversion=0 <=*
Qualcomm · QCA6584AU Firmwareversion=0 <=*
Qualcomm · QCA6335 Firmwareversion=0 <=*
Qualcomm · WCD9380 Firmwareversion=0 <=*
Qualcomm · QCA8085 Firmwareversion=0 <=*
Qualcomm · Qualcomm QCA6574A Firmwareversion=0 <=*
Qualcomm · QCN5152 Firmwareversion=0 <=*
Qualcomm · QCN9012 Firmwareversion=0 <=*
Qualcomm · QCN5024 Firmwareversion=0 <=*
Qualcomm · Qualcomm QCA6574 Firmwareversion=0 <=*
Qualcomm · IPQ8173 Firmwareversion=0 <=*
Qualcomm · QCA9980 Firmwareversion=0 <=*
Qualcomm · QCA9880 Firmwareversion=0 <=*
Qualcomm · Qualcomm QCA6430 Firmwareversion=0 <=*
Qualcomm · QCN6024 Firmwareversion=0 <=*
Qualcomm · QCN5164 Firmwareversion=0 <=*
Qualcomm · QCN9011 Firmwareversion=0 <=*
Qualcomm · Qualcomm IPQ4018 Firmwareversion=0 <=*
Qualcomm · IPQ9574 Firmwareversion=0 <=*
Qualcomm · SA6145P Firmwareversion=0 <=*
Qualcomm · Qualcomm WCN3990 Firmwareversion=0 <=*
Qualcomm · QCN9070 Firmwareversion=0 <=*
Qualcomm · Qualcomm IPQ4029 Firmwareversion=0 <=*
Qualcomm · Qualcomm SD865 5G Firmwareversion=0 <=*
Qualcomm · QCN6132 Firmwareversion=0 <=*
Qualcomm · IPQ8074A Firmwareversion=0 <=*
Qualcomm · MDM9640 Firmwareversion=0 <=*
Qualcomm · Qualcomm WCN3620 Firmwareversion=0 <=*
Qualcomm · Snapdragon Wear 3100 Platform Firmwareversion=0 <=*
Qualcomm · FastConnect 6200 Firmwareversion=0 <=*
Qualcomm · QCA4024 Firmwareversion=0 <=*
Qualcomm · QCA9992 Firmwareversion=0 <=*
Qualcomm · Immersive Home 216 Platform Firmwareversion=0 <=*
Qualcomm · QCN9100 Firmwareversion=0 <=*
Qualcomm · QCN9024 Firmwareversion=0 <=*
Qualcomm · Qualcomm IPQ8070 Firmwareversion=0 <=*
Qualcomm · QCN9003 Firmwareversion=0 <=*
Qualcomm · QCA6174A Firmwareversion=0 <=*
Qualcomm · MDM9628 Firmwareversion=0 <=*
Qualcomm · QCN9000 Firmwareversion=0 <=*
Qualcomm · AQT1000 Firmwareversion=0 <=*
Qualcomm · Qualcomm SDX55 Firmwareversion=0 <=*
Qualcomm · QCN6023 Firmwareversion=0 <=*
Qualcomm · Qualcomm IPQ8064 Firmwareversion=0 <=*
Qualcomm · IPQ5010 Firmwareversion=0 <=*
Qualcomm · WCN3950 Firmwareversion=0 <=*
Qualcomm · WSA8830 Firmwareversion=0 <=*
Qualcomm · QCA6391 Firmwareversion=0 <=*
Qualcomm · Qualcomm Snapdragon XR2 5G Platform Firmwareversion=0 <=*
Qualcomm · Qualcomm Snapdragon 665 Mobile Platform Firmwareversion=0 <=*
Qualcomm · QCA9985 Firmwareversion=0 <=*
Qualcomm · WCD9385 Firmwareversion=0 <=*
Qualcomm · WCD9340 Firmwareversion=0 <=*
Qualcomm · QCM6125 Firmwareversion=0 <=*
Qualcomm · MDM9250 Firmwareversion=0 <=*
Qualcomm · WCN3980 Firmwareversion=0 <=*
Qualcomm · QCA8075 Firmwareversion=0 <=*
Qualcomm · QCA8082 Firmwareversion=0 <=*
Qualcomm · WSA8835 Firmwareversion=0 <=*
Qualcomm · Qualcomm Video Collaboration VC3 Platform Firmwareversion=0 <=*
Qualcomm · IPQ9008 Firmwareversion=0 <=*
Qualcomm · QCS6125 Firmwareversion=0 <=*
Qualcomm · QCN5154 Firmwareversion=0 <=*
Qualcomm · Qualcomm WCD9335 Firmwareversion=0 <=*
Qualcomm · IPQ8072A Firmwareversion=0 <=*
Qualcomm · FastConnect 6800 Firmwareversion=0 <=*
Qualcomm · Qualcomm SD660 Firmwareversion=0 <=*
Qualcomm · Qualcomm Snapdragon X20 LTE Modem Firmwareversion=0 <=*
Qualcomm · QCN5122 Firmwareversion=0 <=*
Qualcomm · SXR2130 Firmwareversion=0 <=*
Qualcomm · QCA6696 Firmwareversion=0 <=*
Qualcomm · SDM429W Firmwareversion=0 <=*
Qualcomm · MDM9650 Firmwareversion=0 <=*
Qualcomm · WSA8815 Firmwareversion=0 <=*
Qualcomm · QCN5124 Firmwareversion=0 <=*
Qualcomm · QCN9072 Firmwareversion=0 <=*
Qualcomm · Robotics RB5 Platform Firmwareversion=0 <=*
Qualcomm · QCA9889 Firmwareversion=0 <=*
Qualcomm · QCA6310 Firmwareversion=0 <=*
Published CVSS scores
CVSS describes severity. EPSS estimates exploitation probability.
Attacks
What attackers are doing with it
Daily unique IPs observed by Shadowserver honeypots for known exploited vulnerabilities (KEVs). Missing observations do not establish an absence of attacks.
Daily unique IPsNo honeypot observations are available for this CVE in the selected window.
Sep 10, 2026Sep 16, 2026
Latest reporting daySep 16, 2026
Latest daily unique IPsUnavailable
Prior 30-day averageUnavailable
SourceShadowserver honeypots (KEV)
Vectorlocal
Privilegesauthenticated
Known exploitationUnconfirmed
Public exploitUnconfirmed
Public exploit references
No public exploit references are available in this record.
Labels summarize the accepted research assessment. They do not indicate a test against your environment.
Technologies
Your stack
See the directory against your own environment.
Your stack
Check the software in your environment
Book a demo to see how Hinoki identifies affected software and validates exploitability in your environment.
Book a demo