CVE-2023-33101 Incorrect Type Conversion or Cast in Multi-Mode Call Processor

Transient DOS while processing DL NAS TRANSPORT message with payload length 0...

CVE-2023-33100 Improper input validation in Multi-Mode Call Processor

Transient DOS while processing DL NAS Transport message when message ID is not defined in the 3GPP specification...

CVE-2023-33100

CVE-2023-33100 is a DoS issue affecting Qualcomm closed‑source components, arising during processing of DL NAS Transport messages when the 3GPP message ID is not defined. The entry shows a network‑based vulnerability with high impact (Availability impact) and a CVSSv3.1 base score of 7.5. Public ...

CVE-2023-33099 Improper Input Validation in Multi-Mode Call Processor

Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR...

CVE-2023-33099

CVE-2023-33099 describes a transient Denial of Service in Qualcomm chipsets caused by processing an SMS container of non-standard size over DL NAS transport in NR. The entry appears under Qualcomm closed-source components with a High impact rating (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). ...

CVE-2023-33099 Improper Input Validation in Multi-Mode Call Processor

Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR...

CVE-2023-33103

Transient DOS while processing CAG info IE received from NW...

CVE-2023-33104

Transient DOS while processing PDU Release command with a parameter PDU ID out of range...

CVE-2023-33095

Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR...

CVE-2023-33084

Transient DOS while processing IE fragments from server during DTLS handshake...

CVE-2023-33086

Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers...

CVE-2023-33096

Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16...

CVE-2023-33090

Transient DOS while processing channel information for speaker protection v2 module in ADSP...

Authentication flaw

Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction sequence number...

Cross site request forgery (csrf)

Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers...

Code injection

Transient DOS while processing CAG info IE received from NW...

Hardcoded credentials

Transient DOS while processing IE fragments from server during DTLS handshake...

CVE-2023-43539 Buffer Over-read in WLAN Firmware

Transient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame...

CVE-2023-43539

CVE-2023-43539 describes a transient Denial of Service in WLAN firmware when processing an improperly formatted 802.11az Fine Time Measurement frame. Likely affects Qualcomm WLAN firmware components; root cause is a buffer over-read/processing error in FTM frame handling. Impact is DoS (availabil...

CVE-2023-33105

CVE-2023-33105 describes a transient DoS in Qualcomm WLAN Host and Firmware when a large number of open authentication frames with an invalid transaction sequence number are sent. The primary documents confirm affected component as WLAN Host and Firmware and note the DoS impact; an exploit reposi...