CVE-2023-21634

Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM...

Memory corruption

Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM...

CVE-2023-33092 Buffer Copy Without Checking Size of Input in Bluetooth HOST

Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size...

CVE-2023-33024 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Radio Interface Layer

Memory corruption while sending SMS from AP firmware...

CVE-2023-21634

CVE-2023-21634 concerns memory corruption in the Radio Interface Layer (RIL) of Qualcomm chipsets when sending an SMS or writing an SMS to a SIM. The issue is described across sources as a memory corruption vulnerability in the RIL, with potential impact to confidentiality, integrity, and availab...

CVE-2023-21634 Improper Restriction of Operations within the Bounds of a Memory Buffer in Radio Interface Layer

Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A security vulnerability previously existed in SAMSUNG Mobile devices SMR Dec-2023 Release 1, which stemmed from an out-of-bounds write vulnerability in HAL's...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated. A security vulnerability exists in Qualcomm Chipsets, which is caused by a memory corruption in the wireless interface layer when sending an SMS or writing an SMS to a SIM...

boring security breach

boring is an open source BoringSSL binding for the Rust programming language from Cloudflare. A security vulnerability exists in boring version 4.0.0, which stems from a memory leak that leads to resource exhaustion, where the function used by the setexdata library does not free memory after each...

CVE-2023-5768

A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Incomplete or wrong received APDU frame layout may cause blocking on link layer. Error reason was an endless blocking when reading incoming frames on link layer with wrong length...

Information disclosure

A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Incomplete or wrong received APDU frame layout may cause blocking on link layer. Error reason was an endless blocking when reading incoming frames on link layer with wrong length...

CVE-2023-5768

A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Incomplete or wrong received APDU frame layout may cause blocking on link layer. Error reason was an endless blocking when reading incoming frames on link layer with wrong length...

CVE-2023-5768

The CVE-2023-5768 issue concerns Hitachi Energy RTU500 series using HCI IEC 60870-5-104. The vulnerability arises from incomplete or incorrect APDU frame layout, which can block the link layer; an endless blocking condition can occur while reading incoming frames when APDU length information is w...

CVE-2023-32854

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08240132; Issue ID: ALPS08240132...

Hitachi Energy RTU500 跨站脚本漏洞

Hitachi Energy RTU500 is a series of industrial control components from Hitachi, Japan. A denial of service vulnerability exists in Hitachi Energy RTU500 series CMU Firmware, which arises from an incomplete or incorrect layout of received APDU frames, and can be exploited by an attacker to cause ...

PT-2023-24182 · Bluetooth · Bluetooth

Name of the Vulnerable Software and Affected Versions: Bluetooth affected versions not specified Description: The issue is related to memory corruption that occurs while processing a pin reply in Bluetooth. This happens when the pin code received from the APP layer exceeds the expected size...

PT-2023-18297 · Qualcomm · Qualcomm Chipsets

Name of the Vulnerable Software and Affected Versions: Qualcomm Chipsets affected versions not specified Description: The issue is related to memory corruption in the Radio Interface Layer, which occurs when sending an SMS or writing an SMS to the SIM. This can potentially lead to code execution...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of boundary checking in the ril service, which may result in out-of-bounds writes...

The vulnerability of the nft_inner.c component in the Linux operating system’s network interface layer allows a hacker to trigger a service failure or increase their privileges.

The vulnerability of the nftinner.c component in the Linux operating system’s network interface layer is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause service failures or increase their privileges...

CVE-2023-2265 Improper restriction of rendered UI layers or frames could lead to clickjacking attack

An Improper Restriction of Rendered UI Layers or Frames in the Schweitzer Engineering Laboratories SEL-411L could allow an unauthenticated attacker to perform clickjacking based attacks against an authenticated and authorized user. See product Instruction Manual Appendix A dated 20230830 for more...