231583 matches found
CVE-2023-43547
CVE-2023-43547 describes memory corruption during IOCTL invocation in Automotive Multimedia. Connected sources attribute this to Qualcomm-driven Automotive Multimedia components, with root cause memory corruption when issuing IOCTLs. Impact is high (confidentiality, integrity, availability); expl...
CVE-2023-43546
CVE-2023-43546 : Memory corruption in HGSL IOCTL context creation has been reported for Qualcomm chipsets. The vulnerability is described as a local issue with high impact (Confidentiality, Integrity, Availability all HIGH) and requires LOCAL access with LOW attack complexity and LOW privileges, ...
CVE-2023-43541
CVE-2023-43541 is a memory corruption issue in the Gfx engine of Qualcomm chipsets triggered by SubmitCommands during graphics rendering. Affected component: Gfx engine SubmitCommands path; root cause: memory corruption. Documented impact indicates high confidentiality, integrity, and availabilit...
CVE-2023-43540
CVE-2023-43540 describes a memory corruption vulnerability in Qualcomm chipset firmware when processing the IOCTL FM HCI WRITE request. The issue is tied to the handling path for FM HCI IOCTLs and is reported with high impact across confidentiality, integrity, and availability, with a local attac...
CVE-2023-43539
CVE-2023-43539 describes a transient Denial of Service in WLAN firmware when processing an improperly formatted 802.11az Fine Time Measurement frame. Likely affects Qualcomm WLAN firmware components; root cause is a buffer over-read/processing error in FTM frame handling. Impact is DoS (availabil...
CVE-2023-33105
CVE-2023-33105 describes a transient DoS in Qualcomm WLAN Host and Firmware when a large number of open authentication frames with an invalid transaction sequence number are sent. The primary documents confirm affected component as WLAN Host and Firmware and note the DoS impact; an exploit reposi...
CVE-2023-33104
CVE-2023-33104 describes a transient Denial of Service when processing a PDU Release command with a PDU ID that is out of range, affecting Qualcomm chipsets. Connected sources corroborate the DoS impact but do not disclose specific vulnerable products, versions, or a remediation/patch version. Th...
CVE-2023-33103
CVE-2023-33103 is described across multiple sources as a Transient Denial of Service issue in Qualcomm chipsets related to processing CAG information elements received from the NW. The connected documents indicate this CVE is associated with Qualcomm closed‑source components (notably listed in th...
CVE-2023-33096
CVE-2023-33096 is a DoS in Qualcomm chipsets caused by transient denial of service while processing a DL NAS Transport message (per 3GPP 24.501 v16). Affected: Qualcomm components/closed-source parts in mobile chipsets; impact is Availability (High), Network attack vector, no user interaction req...
CVE-2023-33086
CVE-2023-33086 affects Qualcomm closed‑source components. The issue is a transient Denial of Service when processing multiple IKEV2 Informational Requests from an IPsec server with different identifiers, leading to high impact on availability. CVSS 3.1 base score 7.5 (Network, Low attack complexi...
CVE-2023-33084
CVE-2023-33084 is a transient Denial-of-Service during processing of IE fragments from a server in the DTLS handshake. The primary sources describe the issue as a DoS affecting Qualcomm chipsets and related closed-source components; exploitation details and affected versions are not publicly enum...
CVE-2023-33078
CVE-2023-33078 affects Qualcomm FastRPC: information disclosure during processing of an IOCTL request on Qualcomm chipsets. Root cause described as information leakage in FastRPC IOCTL handling; impact is Confidentiality ( HIGH ), with Local access as attack vector per NVD metrics. Connected docu...
CVE-2023-33066
CVE-2023-33066 describes a memory corruption in the Audio component of Qualcomm’s closed‑source stack, triggered while processing the RT proxy port register driver. The issue is linked to an out-of-range pointer offset in Audio (per VulnEnrichment), with Qualcomm’s March 2024 product-security bul...
CVE-2023-28582
CVE-2023-28582 is a memory corruption vulnerability in Qualcomm Data Modem triggered during the DTLS handshake when verifying the hello-verify message. Root cause: a buffer copy without checking input size. By sending crafted DTLS messages over the network, a remote attacker could potentially exe...
CVE-2023-28578
CVE-2023-28578 involves memory corruption in Core Services during the removal of a single event listener. Connected sources reference Siemens SCALANCE W700 through the Nessus plugin stating this CVE maps to that product and describing the memory corruption in Core Services when removing an event ...
Race condition
Use After Free vulnerability in Arm Ltd Midgard GPU Kernel Driver, Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to exploit a software race condition to perform improper memory processing...
CVE-2023-6143
CVE-2023-6143 describes a Use-After-Free race condition in ARM Mali GPU Kernel Drivers (Midgard: r13p0–r32p0; Bifrost: r1p0–r18p0; Valhall: r37p0–r46p0; Arm 5th Gen: r41p0–r46p0). A local non-privileged user can trigger improper memory processing under heavy load with carefully prepared memory, l...
Cross site scripting
Stored XSS Vulnerability in M-Files Web versions before 23.8 allows attacker to execute script on users browser via stored HTML document within limited time period...
CVE-2023-4479
The CVE-2023-4479 entry concerns M-Files Web, where versions prior to 23.8 are affected by a stored XSS vulnerability. The issue allows an attacker to execute scripts in a user’s browser via a stored HTML document within a limited time period, indicating a client-side impact stemming from how HTM...