231585 matches found
CVE-2023-43516
CVE-2023-43516 is a memory-corruption vulnerability affecting Qualcomm chipsets where a malformed firmware message payload can trigger corruption. The CVE is tracked across multiple feeds (NVD, Red Hat, NCSC, etc.) and is categorized with CVSSv3.1 metrics: Local attacker, low privileges required,...
CVE-2023-43513
CVE-2023-43513: Memory corruption in Qualcomm components due to an untrusted context read pointer during event-ring processing, which may be advanced with arbitrary values and point to the middle of a ring element. According to the provided data, the CVSS v3.1 base metrics are HIGH for Confidenti...
CVE-2023-33077
CVE-2023-33077: Memory corruption in HLOS during conversion from an authorization token to a HIDL vector. Root cause is memory corruption in the HLOS path handling token-to-HIDL conversion. Impact on confidentiality, integrity and availability is described as High; attack vector is Local with low...
CVE-2023-33076
CVE-2023-33076 involves a memory corruption flaw in the Qualcomm device Core when updating the rollback version with TA and OTA features enabled. The vulnerability is described as memory corruption during rollback version update; the CVSS v3.1 metrics in the initial document indicate a high-impac...
CVE-2023-33072
CVE-2023-33072 is a memory corruption issue affecting Core when processing control functions, with concrete mappings in connected records to Qualcomm closed‑source components and related “Core” memory‑corruption vectors. Public references describe the issue as memory corruption in Core and, in so...
CVE-2023-33069
CVE-2023-33069 concerns a memory corruption vulnerability in the Audio path when processing calibration data returned from the ACDB loader, observed in Qualcomm chipsets. Affected component is the Audio subsystem responsible for calibration data handling; root cause is memory mismanagement during...
CVE-2023-33068
CVE-2023-33068 concerns memory corruption in the Audio component when processing IIR configuration data from an AFE calibration block on Qualcomm chipsets. The public description across sources cites a memory corruption vulnerability in the Audio path due to IIR config data handling, with CVSS me...
CVE-2023-33067
CVE-2023-33067 involves memory corruption in Qualcomm Audio when the START command is issued repeatedly on host voice PCM for the same RX/TX tap points. The description and connected sources consistently indicate a vulnerability in the audio path, with affected component appearing to be Qualcomm’...
CVE-2023-33065
CVE-2023-33065 corresponds to a Qualcomm chipset issue described as a buffer over-read in Audio when accessing AVCS services from an ADSP payload. Connected sources align this as an information disclosure vulnerability affecting Audio components in Qualcomm Snapdragon/QCT environments, with local...
CVE-2023-33064
CVE-2023-33064 is described as a Transient DoS in Audio when invoking the callback function of the ASM driver (Qualcomm chipsets). The vulnerability affects the Audio component via the ASM driver callback path and has a CVSS 3.1 base score of 5.5 (Local, Low Privileges, Low Auth, High Impact on A...
CVE-2023-33060
Summary of CVE-2023-33060 (Transient DOS in Core when DDR memory check is called while DDR is not initialized) Multiple connected sources (NVD, Red Hat, AR/ENISA EUVD, etc.) align on a denial-of-service issue arising in the Core when a DDR memory check is performed before DDR initialization. Publ...
CVE-2023-33058
CVE-2023-33058 involves a Buffer Copy Without Checking Size of Input in the Modem, causing information disclosure during SIB5 processing. The vulnerability targets modem components (Qualcomm/closed‑source modem) and stems from improper bounds checking when copying input data. Impact is confidenti...
CVE-2023-33057
CVE-2023-33057 relates to a Transient DoS in Qualcomm’s Multi-Mode Call Processor when processing UE policy containers. Connected sources describe the issue as an Improper Input Validation flaw in the Multi-Mode Call Processor, affecting Qualcomm closed‑source components. Impact per the CVSS info...
CVE-2023-33049
CVE-2023-33049 is described across multiple connected records as a transient DoS in the Qualcomm Multi‑Mode Call Processor caused by a heap leakage/ improper memory release, leading to UE failure. The vulnerability is associated with Qualcomm closed‑source components; CVSSv3.1 flags a network att...
CVE-2023-33046
CVE-2023-33046 is tied to a TOCTOU (time-of-check/time-of-use) race condition in the Qualcomm Trusted Execution Environment that can cause memory corruption when deinitializing an object used for license validation. The Vulners enrichment entry explicitly describes it as a TOCTOU issue in the TE,...
CVE-2024-23304
Affected software : Cybozu KUNAI for Android, versions 3.0.20–3.0.21. Vulnerability : remote unauthenticated attacker can cause a denial-of-service (DoS) by performing certain operations (CWE-436 per JVNDB entry). Impact : DoS leading to repeated session disconnections or inability to use KUNAI n...
CVE-2024-24808
CVE-2024-24808 affects the pyLoad open-source Download Manager. The issue is an open redirect caused by improper validation in the login redirect flow, specifically how URLs are validated via the get_redirect_url/is_safe_url path. The vulnerability is mitigated by a patch in commit fe94451. Sever...
Information disclosure
Implicit intent hijacking vulnerability in SamsungAccount of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit intent...