CVE-2023-33037 Cryptographic Issues in Automotive

Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data...

CVE-2023-33037

CVE-2023-33037 affects Qualcomm closed‑source components in automotive cryptography, described as a cryptographic issue when unwrapping the key secs2d and verifying RPMB data. Public metrics indicate high impact to confidentiality and/or integrity in some records, with a local attack vector and l...

PT-2024-12380 · Qualcomm · Snapdragon +74

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a cryptographic problem in the automotive sector, specifically when unwrapping the key secs2d and verifying it with RPMB data. No...

The vulnerability of the Opcenter Quality production process management system, the SIMATIC PCS neo technological process management web system, the SINUMERIK Integrate RunMyHMI/Automotive production process automation and management software, and the Totally Integrated Automation Portal (Portal TIA) – related to copying buffers without checking input data size – allows a malicious actor to trigger service failures.

The vulnerability of the Opcenter Quality production process management system, the SIMATIC PCS neo technological process management web system, the SINUMERIK Integrate RunMyHMI/Automotive production process automation and management software, and the Totally Integrated Automation Portal Portal T...

The vulnerability of the Opcenter Quality production process management system, the SIMATIC PCS neo technological process management web system, the SINUMERIK Integrate RunMyHMI/Automotive production process automation and management software, and the Totally Integrated Automation Portal (Portal TIA) – all of which are related to the failure to take measures to protect the website structure – allow attackers to execute arbitrary codes.

The vulnerability of the Opcenter Quality production process management system, the SIMATIC PCS neo technological process management web system, the SINUMERIK Integrate RunMyHMI/Automotive production process automation and management software, and the Totally Integrated Automation Portal Portal T...

The vulnerability of the Opcenter Quality production process management system, the SIMATIC PCS neo technological process management web system, the SINUMERIK Integrate RunMyHMI/Automotive production process automation and management software, and the Totally Integrated Automation Portal (Portal TIA) – related to copying buffers without checking input data size – allows a malicious actor to trigger service failures.

The vulnerability of the Opcenter Quality production process management system, the SIMATIC PCS neo technological process management web system, the SINUMERIK Integrate RunMyHMI/Automotive production process automation and management software, and the Totally Integrated Automation Portal Portal T...

CVE-2023-33071

Memory corruption in Automotive OS whenever untrusted apps try to access HAb for graphics functionalities...

CVE-2023-33071

Memory corruption in Automotive OS whenever untrusted apps try to access HAb for graphics functionalities...

CVE-2023-33070

Transient DOS in Automotive OS due to improper authentication to the secure IO calls...

Authentication flaw

Transient DOS in Automotive OS due to improper authentication to the secure IO calls...

Memory corruption

Memory corruption in Automotive OS whenever untrusted apps try to access HAb for graphics functionalities...

CVE-2023-33071 Improper Access Control in Automotive OS Platform Android

Memory corruption in Automotive OS whenever untrusted apps try to access HAb for graphics functionalities...

CVE-2023-33071 Improper Access Control in Automotive OS Platform Android

Memory corruption in Automotive OS whenever untrusted apps try to access HAb for graphics functionalities...

CVE-2023-33071

CVE-2023-33071 affects Automotive OS where memory corruption occurs when untrusted applications access HAb for graphics functionalities. The incident is described across multiple feeds (NVD, Red Hat, CVE lists, and vendor summaries) as a memory corruption vulnerability in the Automotive OS graphi...

CVE-2023-33070 Improper Authentication in Automotive OS

Transient DOS in Automotive OS due to improper authentication to the secure IO calls...

CVE-2023-33070

CVE-2023-33070 describes a Transient DOS in Automotive OS caused by improper authentication to secure IO calls. Affected component: Automotive OS' secure IO interface; root cause is improper authentication enabling local access to IO calls, leading to availability impact (DoS). According to conne...

CVE-2023-33070 Improper Authentication in Automotive OS

Transient DOS in Automotive OS due to improper authentication to the secure IO calls...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. The Qualcomm Chipsets have a security vulnerability that stems from a denial of service in the automotive operating system due to improper authentication of secure IO calls...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. The Qualcomm Chipsets suffer from a security vulnerability that stems from memory corruption in the automotive operating system whenever an untrusted application attempts to access HAb for graphics capabilities...

PT-2023-24170 · Unknown · Automotive Os

Name of the Vulnerable Software and Affected Versions: Automotive OS affected versions not specified Description: The issue is related to memory corruption in Automotive OS when untrusted apps attempt to access the HAb for graphics functionalities. Recommendations: At the moment, there is no...