306 matches found
CVE-2023-33117
CVE-2023-33117 describes a memory corruption vulnerability in Qualcomm chipsets where the host (HLOS) allocates the response payload buffer to copy data received from the ADSP in response to the AVCS_LOAD_MODULE command. The CVE is documented with a Qualcomm security context and a high-severity C...
CVE-2023-33030 Buffer Copy without Checking Size of Input in HLOS
Memory corruption in HLOS while running playready use-case...
CVE-2023-33030
CVE-2023-33030 is a memory corruption issue in HLOS observed while running the PlayReady use-case on Qualcomm chipsets. Connected details indicate the underlying cause as buffer copy without checking the size of input, leading to potential corruption. Documented impact across sources emphasizes h...
CVE-2023-33063
Memory corruption in DSP Services during a remote call from HLOS to DSP...
CVE-2023-33054
Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data...
CVE-2023-33022
Memory corruption in HLOS while invoking IOCTL calls from user-space...
Design/Logic Flaw
Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data...
Memory corruption
Memory corruption in DSP Services during a remote call from HLOS to DSP...
Memory corruption
Memory corruption in HLOS while invoking IOCTL calls from user-space...
CVE-2023-33063
CVE-2023-33063 is a Use-After-Free/memory corruption issue in Qualcomm DSP Services triggered by a remote call from HLOS to DSP. Affected: Qualcomm chipsets with DSP Services; root cause: memory corruption leading to potential unintended behavior. Documents indicate high impact (confidentiality, ...
CVE-2023-33063 Use After Free in DSP Services
Memory corruption in DSP Services during a remote call from HLOS to DSP...
CVE-2023-33054
CVE-2023-33054 is linked to a cryptographic issue in the Qualcomm GPS HLOS Driver during GNSS assistance data download. Connected PT-12561 entries and vendor bulletins corroborate the GPS HLOS Driver context, but none of the connected documents provide concrete affected versions, root-cause detai...
CVE-2023-33054 Improper Authentication in GPS HLOS Driver
Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data...
CVE-2023-33022
CVE-2023-33022 corresponds to a memory corruption issue in the HLOS triggered by IOCTL calls from user-space, affecting Qualcomm components (including Qualcomm closed-source parts). The vulnerability is described in multiple sources as memory corruption with potential total impact on the system, ...
CVE-2023-33022 Integer Overflow to Buffer Overflow in HLOS
Memory corruption in HLOS while invoking IOCTL calls from user-space...
CVE-2023-33022 Integer Overflow to Buffer Overflow in HLOS
Memory corruption in HLOS while invoking IOCTL calls from user-space...
CVE-2023-33063
Memory corruption in DSP Services during a remote call from HLOS to DSP. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services during a remote call from HLOS to DSP...