CVE-2023-28551

Q: What is the severity of CVE-2023-28551?

CVE-2023-28551 has a CVSS score of 7.8 (HIGH). This vulnerability allows memory corruption in Qualcomm modem UTILS when processing Diag commands with arbitrary address values. Attackers could potentially execute arbitrary code or cause denial of service on affected devices. This affects devices with Qualcomm modems that have vulnerable firmware versions.

7.8 HIGH

📋 TL;DR

This vulnerability allows memory corruption in Qualcomm modem UTILS when processing Diag commands with arbitrary address values. Attackers could potentially execute arbitrary code or cause denial of service on affected devices. This affects devices with Qualcomm modems that have vulnerable firmware versions.

💻 Affected Systems

Products:

Qualcomm modem chipsets with vulnerable firmware

Versions: Specific affected firmware versions not publicly detailed in bulletin

Operating Systems: Android and other OS using Qualcomm modems

Default Config Vulnerable: ⚠️ Yes

Notes: Affects devices with Qualcomm modems where Diag interface is accessible. Exact chipset models not specified in public bulletin.

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Remote code execution on the modem, potentially leading to complete device compromise, data exfiltration, or persistent backdoor installation.

🟠

Likely Case

Denial of service causing modem crashes, loss of cellular connectivity, or device instability requiring reboot.

🟢

If Mitigated

Limited impact if proper access controls prevent unauthorized Diag command execution and network segmentation is implemented.

🌐 Internet-Facing: MEDIUM - Requires specific Diag command access which may be exposed through diagnostic interfaces or vulnerable applications.

🏢 Internal Only: HIGH - If internal diagnostic tools or compromised applications can send Diag commands to the modem.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Exploitation requires ability to send Diag commands to the modem, which typically requires some level of access or compromised application.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Refer to December 2023 Qualcomm security bulletin for specific patched firmware versions

Vendor Advisory: https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin

Restart Required: Yes

Instructions:

1. Check with device manufacturer for firmware updates. 2. Apply Qualcomm-provided firmware patches. 3. Reboot device after update. 4. Verify modem firmware version is updated.

🔧 Temporary Workarounds

Disable diagnostic interfaces

all

Restrict access to modem diagnostic interfaces to prevent unauthorized Diag command execution

Device-specific commands to disable Diag services

Network segmentation

all

Isolate devices with vulnerable modems from untrusted networks

🧯 If You Can't Patch

Implement strict access controls to prevent unauthorized applications from accessing modem interfaces
Monitor for unusual modem diagnostic activity or unexpected modem resets

🔍 How to Verify

Check if Vulnerable:

Check modem firmware version against Qualcomm security bulletin. Use device-specific diagnostic tools to query modem firmware version.

Check Version:

Device-specific commands (e.g., Android: getprop | grep version.baseband)

Verify Fix Applied:

Verify modem firmware version has been updated to patched version specified in Qualcomm bulletin.

📡 Detection & Monitoring

Log Indicators:

Unexpected modem resets
Diag command execution logs
Modem crash reports

Network Indicators:

Unusual diagnostic protocol traffic to modem interfaces

SIEM Query:

Search for modem diagnostic service access or modem crash events in device logs

📊 Metadata

CVE ID: CVE-2023-28551

CVSS v3 Score: 7.8 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE: CWE-119

Published: December 5, 2023

Last Updated: August 11, 2025

🔗 References

https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin Vendor Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

315 5g Iot Modem Firmware by Qualcomm

9205 Lte Modem Firmware by Qualcomm

9206 Lte Modem Firmware by Qualcomm

9207 Lte Modem Firmware by Qualcomm

Apq8017 Firmware by Qualcomm

Apq8037 Firmware by Qualcomm

Aqt1000 Firmware by Qualcomm

Ar8035 Firmware by Qualcomm

C V2x 9150 Firmware by Qualcomm

Csra6620 Firmware by Qualcomm

Csra6640 Firmware by Qualcomm

Csrb31024 Firmware by Qualcomm

Fastconnect 6200 Firmware by Qualcomm

Fastconnect 6700 Firmware by Qualcomm

Fastconnect 6800 Firmware by Qualcomm

Fastconnect 6900 Firmware by Qualcomm

Fastconnect 7800 Firmware by Qualcomm

Fsm10055 Firmware by Qualcomm

Mdm8207 Firmware by Qualcomm

Mdm9205s Firmware by Qualcomm

Mdm9250 Firmware by Qualcomm

Mdm9628 Firmware by Qualcomm

Mdm9640 Firmware by Qualcomm

Msm8108 Firmware by Qualcomm

Msm8209 Firmware by Qualcomm

Msm8608 Firmware by Qualcomm

Msm8909w Firmware by Qualcomm

Msm8996au Firmware by Qualcomm

Qca4004 Firmware by Qualcomm

Qca6174a Firmware by Qualcomm

Qca6310 Firmware by Qualcomm

Qca6320 Firmware by Qualcomm

Qca6335 Firmware by Qualcomm

Qca6391 Firmware by Qualcomm

Qca6420 Firmware by Qualcomm

Qca6421 Firmware by Qualcomm

Qca6426 Firmware by Qualcomm

Qca6430 Firmware by Qualcomm

Qca6431 Firmware by Qualcomm

Qca6436 Firmware by Qualcomm

Qca6564a Firmware by Qualcomm

Qca6564au Firmware by Qualcomm

Qca6574 Firmware by Qualcomm

Qca6574a Firmware by Qualcomm

Qca6574au Firmware by Qualcomm

Qca6584 Firmware by Qualcomm

Qca6584au Firmware by Qualcomm

Qca6595au Firmware by Qualcomm

Qca6696 Firmware by Qualcomm

Qca6698aq Firmware by Qualcomm

Qca8081 Firmware by Qualcomm

Qca8337 Firmware by Qualcomm

Qca9367 Firmware by Qualcomm

Qca9377 Firmware by Qualcomm

Qcc710 Firmware by Qualcomm

Qcm2290 Firmware by Qualcomm

Qcm4290 Firmware by Qualcomm

Qcm4325 Firmware by Qualcomm

Qcm4490 Firmware by Qualcomm

Qcm5430 Firmware by Qualcomm

Qcm6125 Firmware by Qualcomm

Qcm6490 Firmware by Qualcomm

Qcm8550 Firmware by Qualcomm

Qcn6024 Firmware by Qualcomm

Qcn6224 Firmware by Qualcomm

Qcn6274 Firmware by Qualcomm

Qcn9024 Firmware by Qualcomm

Qcs2290 Firmware by Qualcomm

Qcs410 Firmware by Qualcomm

Qcs4290 Firmware by Qualcomm

Qcs4490 Firmware by Qualcomm

Qcs5430 Firmware by Qualcomm

Qcs610 Firmware by Qualcomm

Qcs6125 Firmware by Qualcomm

Qcs6490 Firmware by Qualcomm

Qcs8550 Firmware by Qualcomm

Qdu1000 Firmware by Qualcomm