CVE-2023-33063

Memory corruption in DSP Services during a remote call from HLOS to DSP...

CVE-2023-33054

Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data...

CVE-2023-33022

Memory corruption in HLOS while invoking IOCTL calls from user-space...

Memory corruption

Memory corruption in DSP Services during a remote call from HLOS to DSP...

Memory corruption

Memory corruption in HLOS while invoking IOCTL calls from user-space...

Design/Logic Flaw

Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data...

CVE-2023-33063 Use After Free in DSP Services

Memory corruption in DSP Services during a remote call from HLOS to DSP...

CVE-2023-33063

CVE-2023-33063 is a Use-After-Free/memory corruption issue in Qualcomm DSP Services triggered by a remote call from HLOS to DSP. Affected: Qualcomm chipsets with DSP Services; root cause: memory corruption leading to potential unintended behavior. Documents indicate high impact (confidentiality, ...

CVE-2023-33054 Improper Authentication in GPS HLOS Driver

Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data...

CVE-2023-33054

CVE-2023-33054 is linked to a cryptographic issue in the Qualcomm GPS HLOS Driver during GNSS assistance data download. Connected PT-12561 entries and vendor bulletins corroborate the GPS HLOS Driver context, but none of the connected documents provide concrete affected versions, root-cause detai...

CVE-2023-33022

CVE-2023-33022 corresponds to a memory corruption issue in the HLOS triggered by IOCTL calls from user-space, affecting Qualcomm components (including Qualcomm closed-source parts). The vulnerability is described in multiple sources as memory corruption with potential total impact on the system, ...

CVE-2023-33022 Integer Overflow to Buffer Overflow in HLOS

Memory corruption in HLOS while invoking IOCTL calls from user-space...

CVE-2023-33022 Integer Overflow to Buffer Overflow in HLOS

Memory corruption in HLOS while invoking IOCTL calls from user-space...

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services during a remote call from HLOS to DSP...

CVE-2023-33063

Memory corruption in DSP Services during a remote call from HLOS to DSP. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

CVE-2023-28556

Cryptographic issue in HLOS during key management...

Design/Logic Flaw

Cryptographic issue in HLOS during key management...

CVE-2023-28556 Improper Authorization in HLOS

Cryptographic issue in HLOS during key management...

CVE-2023-28556

Technical details for CVE-2023-28556 are not publicly provided in the supplied documents. No concrete affected products, versions, root cause or fixes are disclosed here. Monitor for updates from vendors and security bulletins.

PT-2023-21803 · Hlos · Hlos

Name of the Vulnerable Software and Affected Versions: HLOS affected versions not specified Description: A cryptographic issue exists in HLOS during key management. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...