CVE-2023-28557 Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload...

CVE-2023-28557

CVE-2023-28557 affects Qualcomm WLAN HAL, causing memory corruption when processing command parameters from an untrusted WMI payload. The issue is described as a local vulnerability with low attack complexity and exploit prerequisites, but with high impact to confidentiality, integrity, and avail...

CVE-2023-28557 Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload...

CVE-2023-28549

CVE-2023-28549 describes memory corruption in the Qualcomm WLAN HAL while parsing a TLV payload in the Rx path. The vulnerability affects Qualcomm WLAN components (closed-source) and is rated with CVSSv3.1: Local attack, Low privileges required, no user interaction, with high impact on confidenti...

CVE-2023-28549 Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN HAL

Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload...

CVE-2023-28548 Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART...

CVE-2023-28548 Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART...

CVE-2023-28548

CVE-2023-28548 describes memory corruption in the WLAN HAL when processing Tx/Rx commands from QDART. The entry identifies the affected component as Qualcomm closed-source WLAN HAL and attributes the issue to a faulty handling path in QDART Tx/Rx processing, with a CVSSv3.1 base score of 7.8 (Att...

CVE-2022-33275

CVE-2022-33275 describes memory corruption due to improper validation of an array index in the WLAN HAL when lm_itemNum is out of range. The issue affects Qualcomm chipsets’ WLAN HAL and is caused by out-of-bounds handling of item indices, leading to potential memory corruption. Public details in...

CVE-2022-33275 Improper validation of array index in WLAN HAL

Memory corruption due to improper validation of array index in WLAN HAL when received lmitemNum is out of range...

CVE-2022-33275 Improper validation of array index in WLAN HAL

Memory corruption due to improper validation of array index in WLAN HAL when received lmitemNum is out of range...

PT-2023-21808 · Wlan Hal · Wlan Hal

Name of the Vulnerable Software and Affected Versions: WLAN HAL affected versions not specified Description: The issue is related to memory corruption in the WLAN HAL when processing the devIndex from an untrusted WMI payload. This can lead to potential security risks. There is no information...

PT-2023-21812 · Qualcomm · Qualcomm Snapdragon Processors

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Processors affected versions not specified Description: The issue is related to memory corruption in the WLAN HAL when passing command parameters through WMI interfaces. This can potentially lead to security risks. There i...

PT-2023-13281 · Wlan Hal · Wlan Hal

Name of the Vulnerable Software and Affected Versions: WLAN HAL affected versions not specified Description: The issue is caused by memory corruption due to improper validation of array index in WLAN HAL when the received lm itemNum is out of range. This can lead to potential exploits. There is n...

Out-of-bounds

In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-30681

An improper input validation vulnerability within initialize function in HAL VaultKeeper prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write...

CVE-2023-30681

An improper input validation vulnerability within initialize function in HAL VaultKeeper prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write...

CVE-2023-30681

CVE-2023-30681 affects HAL VaultKeeper, specifically the initialize function. Connected sources confirm the vulnerability is an improper input validation that can lead to an out-of-bounds write in VaultKeeper prior to SMR Aug-2023 Release 1. Impact per NVD indicates HIGH severity (CVSSv3.1: AV:L/...

CVE-2023-30681

An improper input validation vulnerability within initialize function in HAL VaultKeeper prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write...

PT-2023-22879 · Unknown · Hal Vaultkeeper

Name of the Vulnerable Software and Affected Versions: HAL VaultKeeper versions prior to SMR Aug-2023 Release 1 Description: The issue is related to an improper input validation vulnerability within the initialize function. This vulnerability allows an attacker to cause an out-of-bounds write...