CVE-2023-28588

Integer Overflow or Wraparound in Bluetooth Host

Transient DOS in Bluetooth Host while rfc slot allocation.

Affected

Qualcomm, Inc. · Snapdragon

CVSS v3.1 NVD

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.52% chance of exploitation in the next 30 days, 43rd percentile

Published

2023-12-05

Updated

2024-08-02

Proof-of-concept exploits (5)

• Trinadh465/CVE-2023-285881★ · 2024-01-12
• uthrasri/CVE-2023-285880★ · 2024-01-19
• uthrasri/CVE-2023-28588_G2.5_singlefile0★ · 2024-01-22
• uthrasri/CVE-2023-28588_Singlefile0★ · 2024-01-19
• uthrasri/CVE-2023-28588_system_bt0★ · 2024-01-12

Security advisories

• https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin

References

• CVE Record
• NVD entry

Related

• CVE-2014-3566
• CVE-2014-3570
• CVE-2014-5139
• CVE-2014-8275
• CVE-2019-16746
• CVE-2019-17666