303 matches found
CVE-2023-43528
CVE-2023-43528 concerns Qualcomm chipsets’ Audio components. Information disclosure occurs when the ADSP payload size returned to HLOS in response to an Audio Stream Manager matrix session is smaller than expected, caused by a mismatch in the ADSP payload size. The vulnerability impacts confident...
CVE-2023-43521 Use After Free in HLOS
Memory corruption when multiple listeners are being registered with the same file descriptor...
CVE-2023-43515
Memory corruption in HLOS while running kernel address sanitizers syzkaller on tmecom with DEBUGFS enabled...
CVE-2023-43515 Buffer copy without checking size of input (Classic buffer overflow) in HLOS
Memory corruption in HLOS while running kernel address sanitizers syzkaller on tmecom with DEBUGFS enabled...
CVE-2023-43515
CVE-2023-43515 describes memory corruption in HLOS when running kernel address sanitizers (syzkaller) on tmecom with DEBUG_FS enabled. The issue targets the HLOS kernel path (syzkaller/DEBUG_FS context) and is linked to Qualcomm components (bootloader in the Qualcomm catalog). The connected docum...
CVE-2023-43515 Buffer copy without checking size of input (Classic buffer overflow) in HLOS
Memory corruption in HLOS while running kernel address sanitizers syzkaller on tmecom with DEBUGFS enabled...
CVE-2023-43513
Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element...
Memory corruption
Memory corruption in HLOS while converting from authorization token to HIDL vector...
CVE-2023-33077
Memory corruption in HLOS while converting from authorization token to HIDL vector...
CVE-2023-43513 Use of Out-of-range Pointer Offset in PCIe
Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element...
CVE-2023-33077
CVE-2023-33077: Memory corruption in HLOS during conversion from an authorization token to a HIDL vector. Root cause is memory corruption in the HLOS path handling token-to-HIDL conversion. Impact on confidentiality, integrity and availability is described as High; attack vector is Local with low...
CVE-2023-33077 Buffer Copy Without Checking Size of Input in HLOS
Memory corruption in HLOS while converting from authorization token to HIDL vector...
CVE-2023-33117
Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVCSLOADMODULE command...
CVE-2023-33030
Memory corruption in HLOS while running playready use-case...
Memory corruption
Memory corruption in HLOS while running playready use-case...
Memory corruption
Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVCSLOADMODULE command...
CVE-2023-33117
CVE-2023-33117 describes a memory corruption vulnerability in Qualcomm chipsets where the host (HLOS) allocates the response payload buffer to copy data received from the ADSP in response to the AVCS_LOAD_MODULE command. The CVE is documented with a Qualcomm security context and a high-severity C...
CVE-2023-33117 Use After Free in Audio
Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVCSLOADMODULE command...
CVE-2023-33030
CVE-2023-33030 is a memory corruption issue in HLOS observed while running the PlayReady use-case on Qualcomm chipsets. Connected details indicate the underlying cause as buffer copy without checking the size of input, leading to potential corruption. Documented impact across sources emphasizes h...