CVE-2023-28551

CVE-2023-28551 describes memory corruption in UTILS when the modem processes memory-specific Diag commands with arbitrary address values. The issue affects Qualcomm chipset components (Qualcomm closed-source/Qualcomm components) and is rated with CVSS v3.1: Local access, Low attack complexity, Lo...

CVE-2023-28551 Improper Restriction of Operations within the Bounds of a Memory Buffer in UTILS

Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments...

CVE-2023-28551: Improper Restriction of Operations within the Bounds of a Memory Buffer

Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments...

CVE-2023-33018: Integer Overflow to Buffer Overflow

Memory corruption while using the UIM diag command to get the operators name...

kernel: KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler

In the Linux kernel, the following vulnerability has been resolved: KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler We do check for target CPU == -1, but this might change at the time we are going to use it. Hold the physical target CPU in a local variable to avoid...

CVE-2023-28574

Memory corruption in core services when Diag handler receives a command to configure event listeners...

Memory corruption

Memory corruption in core services when Diag handler receives a command to configure event listeners...

CVE-2023-28574 Improper Input Validation in Core

Memory corruption in core services when Diag handler receives a command to configure event listeners...

CVE-2023-28574 Improper Input Validation in Core

Memory corruption in core services when Diag handler receives a command to configure event listeners...

CVE-2023-28574

CVE-2023-28574 affects Qualcomm closed‑source components. The issue is described as memory corruption in core services triggered when the Diag handler receives a command to configure event listeners. Documented impact includes high/critical severity (local, with high confidentiality, integrity, a...

CVE-2023-28574: Improper Input Validation

Memory corruption in core services when Diag handler receives a command to configure event listeners...

PT-2023-6254

Name of the Vulnerable Software and Affected Versions Yifan YF325 version 1.0 20221108 Description A command execution issue exists in the diag ping start functionality of the validate.so module. This is due to inadequate data cleaning at the management level. An attacker can exploit this by...

kernel: denial of service problem in net/unix/diag.c

A NULL pointer dereference flaw was found in the UNIX protocol in net/unix/diag.c In unixdiaggetexact in the Linux Kernel. The newly allocated skb does not have sk, leading to a NULL pointer. This flaw allows a local user to crash or potentially cause a denial of service...

kernel: denial of service problem in net/unix/diag.c

A NULL pointer dereference flaw was found in the UNIX protocol in net/unix/diag.c In unixdiaggetexact in the Linux Kernel. The newly allocated skb does not have sk, leading to a NULL pointer. This flaw allows a local user to crash or potentially cause a denial of service...

PT-2023-5332 · D Link · Di-7200Gv2.E1

Name of the Vulnerable Software and Affected Versions: D-Link device DI-7200GV2.E1 version 21.04.09E1 Description: The issue is related to a stack overflow in the H5/hi block.asp function when processing the popupId parameter. This can allow a remote attacker to impact the confidentiality,...

PT-2025-38445

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free error exists in the xsk diag interface when a socket is unbound from the device, potentially occurring during socket closure or device disappearance. The issue stems fro...

PT-2023-26727 · Opnsense · Opnsense Community Edition +1

Name of the Vulnerable Software and Affected Versions: OPNsense Community Edition versions prior to 23.7 OPNsense Business Edition versions prior to 23.4.2 Description: A command injection issue in the diag backup.php component allows attackers to execute arbitrary commands via a crafted backup...

CVE-2022-33226

Memory corruption due to buffer copy without checking the size of input in Core while processing ioctl commands from diag client applications...

CVE-2022-33226

CVE-2022-33226 is described in the provided documents as memory corruption due to a buffer copy that does not check input size in Core when handling ioctl commands from diag client applications. Root cause: unchecked copy size during ioctl processing. Impact described in the sources includes high...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption due to buffer copying without checking the size of inputs in Core when processing ioctl commands from a diag client application...