CVE-2023-21625
High
Published: 08 August 2023
Published
08 August 2023
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
EPSS Score
0.0010
27.0th percentile
Risk Priority
16
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2023-21625 is a high-severity Buffer Over-read (CWE-126) vulnerability in Qualcomm Apq8009 Firmware. Its CVSS base score is 8.2 (High).
Operationally, ranked at the 27.0th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-25792
Vulnerability details
Information disclosure in Network Services due to buffer over-read while the device receives DNS response.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
qualcomm
apq8009 firmware
all versions
qualcomm
apq8017 firmware
all versions
qualcomm
apq8037 firmware
all versions
qualcomm
ar8031 firmware
all versions
qualcomm
csra6620 firmware
all versions
qualcomm
csra6640 firmware
all versions
qualcomm
mdm9205 firmware
all versions
qualcomm
mdm9250 firmware
all versions
qualcomm
mdm9650 firmware
all versions
qualcomm
msm8108 firmware
all versions
+36 more product configuration(s) — see NVD for full list
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.