CVE-2023-28587

Q: What is the severity of CVE-2023-28587?

CVE-2023-28587 has a CVSS score of 7.8 (HIGH). This vulnerability allows memory corruption in Qualcomm Bluetooth controllers when parsing specific debug commands at the HCI interface level. Attackers could potentially execute arbitrary code or cause denial of service on affected devices. This affects devices using vulnerable Qualcomm Bluetooth chipsets.

7.8 HIGH

📋 TL;DR

This vulnerability allows memory corruption in Qualcomm Bluetooth controllers when parsing specific debug commands at the HCI interface level. Attackers could potentially execute arbitrary code or cause denial of service on affected devices. This affects devices using vulnerable Qualcomm Bluetooth chipsets.

💻 Affected Systems

Products:

Qualcomm Bluetooth chipsets/controllers

Versions: Specific versions not detailed in public advisory

Operating Systems: Android, Linux, and other OS using Qualcomm Bluetooth

Default Config Vulnerable: ⚠️ Yes

Notes: Affects devices with Bluetooth enabled and debug features accessible

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Remote code execution leading to complete device compromise, data theft, or persistent backdoor installation

🟠

Likely Case

Bluetooth service crash causing denial of service, requiring device restart

🟢

If Mitigated

Limited impact with proper network segmentation and Bluetooth access controls

🌐 Internet-Facing: LOW (requires Bluetooth proximity or network access to Bluetooth interface)

🏢 Internal Only: MEDIUM (internal attackers with Bluetooth access could exploit)

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ⚠️ Yes

Complexity: MEDIUM

Requires sending crafted Bluetooth HCI debug commands to vulnerable interface

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Refer to December 2023 Qualcomm security bulletin

Vendor Advisory: https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin

Restart Required: Yes

Instructions:

1. Check device manufacturer for firmware updates 2. Apply Qualcomm-provided patches 3. Update Bluetooth firmware/drivers 4. Reboot device

🔧 Temporary Workarounds

Disable Bluetooth debug features

all

Disable HCI debug command processing if not required

Device-specific commands vary by manufacturer

Restrict Bluetooth access

all

Limit Bluetooth connections to trusted devices only

Use Bluetooth pairing restrictions and MAC filtering

🧯 If You Can't Patch

Disable Bluetooth when not in use
Implement network segmentation to isolate Bluetooth traffic

🔍 How to Verify

Check if Vulnerable:

Check device Bluetooth chipset model and firmware version against Qualcomm advisory

Check Version:

Device-specific commands (e.g., 'hciconfig -a' on Linux, Bluetooth settings on mobile devices)

Verify Fix Applied:

Verify Bluetooth firmware version has been updated to patched version

📡 Detection & Monitoring

Log Indicators:

Unusual Bluetooth HCI debug command patterns
Bluetooth service crashes

Network Indicators:

Malformed Bluetooth HCI packets
Unexpected debug command traffic

SIEM Query:

Bluetooth HCI debug commands with suspicious sub-opcodes

📊 Metadata

CVE ID: CVE-2023-28587

CVSS v3 Score: 7.8 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE: CWE-119

Published: December 5, 2023

Last Updated: August 11, 2025

🔗 References

https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin Vendor Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

315 5g Iot Modem Firmware by Qualcomm

Aqt1000 Firmware by Qualcomm

Ar8031 Firmware by Qualcomm

Ar8035 Firmware by Qualcomm

Csra6620 Firmware by Qualcomm

Csra6640 Firmware by Qualcomm

Csrb31024 Firmware by Qualcomm

Fastconnect 6200 Firmware by Qualcomm

Fastconnect 6700 Firmware by Qualcomm

Fastconnect 6800 Firmware by Qualcomm

Fastconnect 6900 Firmware by Qualcomm

Fastconnect 7800 Firmware by Qualcomm

Qam8255p Firmware by Qualcomm

Qam8295p Firmware by Qualcomm

Qam8650p Firmware by Qualcomm

Qam8775p Firmware by Qualcomm

Qca2062 Firmware by Qualcomm

Qca2064 Firmware by Qualcomm

Qca2065 Firmware by Qualcomm

Qca2066 Firmware by Qualcomm

Qca6391 Firmware by Qualcomm

Qca6420 Firmware by Qualcomm

Qca6421 Firmware by Qualcomm

Qca6426 Firmware by Qualcomm

Qca6430 Firmware by Qualcomm

Qca6431 Firmware by Qualcomm

Qca6436 Firmware by Qualcomm

Qca6554a Firmware by Qualcomm

Qca6564au Firmware by Qualcomm

Qca6574 Firmware by Qualcomm

Qca6574a Firmware by Qualcomm

Qca6574au Firmware by Qualcomm

Qca6584au Firmware by Qualcomm

Qca6595 Firmware by Qualcomm

Qca6595au Firmware by Qualcomm

Qca6678aq Firmware by Qualcomm

Qca6696 Firmware by Qualcomm

Qca6698aq Firmware by Qualcomm

Qca6797aq Firmware by Qualcomm

Qca8081 Firmware by Qualcomm

Qca8337 Firmware by Qualcomm

Qcc2073 Firmware by Qualcomm

Qcc2076 Firmware by Qualcomm

Qcc710 Firmware by Qualcomm

Qcc711 Firmware by Qualcomm

Qcm2290 Firmware by Qualcomm

Qcm4290 Firmware by Qualcomm

Qcm4325 Firmware by Qualcomm

Qcm4490 Firmware by Qualcomm

Qcm5430 Firmware by Qualcomm

Qcm6125 Firmware by Qualcomm

Qcm6490 Firmware by Qualcomm

Qcm8550 Firmware by Qualcomm

Qcn6024 Firmware by Qualcomm

Qcn6224 Firmware by Qualcomm

Qcn6274 Firmware by Qualcomm

Qcn7605 Firmware by Qualcomm

Qcn7606 Firmware by Qualcomm

Qcn9024 Firmware by Qualcomm

Qcn9074 Firmware by Qualcomm

Qcs2290 Firmware by Qualcomm

Qcs410 Firmware by Qualcomm

Qcs4290 Firmware by Qualcomm

Qcs4490 Firmware by Qualcomm

Qcs5430 Firmware by Qualcomm

Qcs610 Firmware by Qualcomm

Qcs6125 Firmware by Qualcomm

Qcs6490 Firmware by Qualcomm

Qcs8550 Firmware by Qualcomm

Qfw7114 Firmware by Qualcomm

Qfw7124 Firmware by Qualcomm

Qsm8350 Firmware by Qualcomm

Sa4150p Firmware by Qualcomm

Sa4155p Firmware by Qualcomm

Sa6145p Firmware by Qualcomm

Sa6150p Firmware by Qualcomm

Sa6155 Firmware by Qualcomm