CVE-2023-21625

High

Description

Information disclosure in Network Services due to buffer over-read while the device receives DNS response.

SeverityHigh
CVSS8.2
Exploit probability—
ProductQualcomm Apq8009 Firmware
PublishedAug 8, 2023
First seenAug 8, 2023
Weakness typeCWE-126CWE-126

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
qualcomm apq8009_firmwareNo range specified—
qualcomm apq8017_firmwareNo range specified—
qualcomm apq8037_firmwareNo range specified—
qualcomm ar8031_firmwareNo range specified—
qualcomm csra6620_firmwareNo range specified—
qualcomm csra6640_firmwareNo range specified—
qualcomm mdm9205_firmwareNo range specified—
qualcomm mdm9250_firmwareNo range specified—
qualcomm mdm9650_firmwareNo range specified—
qualcomm msm8108_firmwareNo range specified—
qualcomm msm8208_firmwareNo range specified—
qualcomm msm8209_firmwareNo range specified—
qualcomm msm8608_firmwareNo range specified—
qualcomm msm8917_firmwareNo range specified—
qualcomm msm8937_firmwareNo range specified—
qualcomm qca4004_firmwareNo range specified—
qualcomm qca4010_firmwareNo range specified—
qualcomm qca4020_firmwareNo range specified—
qualcomm qca4024_firmwareNo range specified—
qualcomm qca6174a_firmwareNo range specified—
qualcomm qca6564a_firmwareNo range specified—
qualcomm qca6564au_firmwareNo range specified—
qualcomm qca6574a_firmwareNo range specified—
qualcomm qca6574au_firmwareNo range specified—
qualcomm qca9377_firmwareNo range specified—
qualcomm qcs405_firmwareNo range specified—
qualcomm qts110_firmwareNo range specified—
qualcomm sd205_firmwareNo range specified—
qualcomm sd210_firmwareNo range specified—
qualcomm sd429_firmwareNo range specified—
qualcomm sd439_firmwareNo range specified—
qualcomm sd835_firmwareNo range specified—
qualcomm wcd9306_firmwareNo range specified—
qualcomm wcd9326_firmwareNo range specified—
qualcomm wcd9335_firmwareNo range specified—
qualcomm wcd9340_firmwareNo range specified—
qualcomm wcn3610_firmwareNo range specified—
qualcomm wcn3615_firmwareNo range specified—
qualcomm wcn3660b_firmwareNo range specified—
qualcomm wcn3680b_firmwareNo range specified—
qualcomm wcn3980_firmwareNo range specified—
qualcomm wcn3990_firmwareNo range specified—
qualcomm wcn3998_firmwareNo range specified—
qualcomm wcn3999_firmwareNo range specified—
qualcomm wsa8810_firmwareNo range specified—
qualcomm wsa8815_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2023-21625 · Qualcomm Apq8009 Firmware · Dark Radar