1375 matches found
CVE-2023-33103 Improper Input Validation in Multi-Mode Call Processor
Transient DOS while processing CAG info IE received from NW...
CVE-2023-33096 Reachable Assertion in Multi-Mode Call Processor
Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16...
CVE-2023-33096
CVE-2023-33096 is a DoS in Qualcomm chipsets caused by transient denial of service while processing a DL NAS Transport message (per 3GPP 24.501 v16). Affected: Qualcomm components/closed-source parts in mobile chipsets; impact is Availability (High), Network attack vector, no user interaction req...
CVE-2023-33095 Reachable Assertion in Multi-Mode Call Processor
Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR...
CVE-2023-33095 Reachable Assertion in Multi-Mode Call Processor
Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR...
CVE-2023-33095
CVE-2023-33095 describes a transient Denial of Service in Qualcomm chipsets when processing multiple payload container types with an incorrect container length in the Downlink NAS transport OTA in NR. Root cause per connected sources is improper handling of container lengths in the DL NAS OTA pat...
CVE-2023-33090 Buffer Over-read in Audio
Transient DOS while processing channel information for speaker protection v2 module in ADSP...
CVE-2023-33090
The CVE-2023-33090 entry concerns Qualcomm ADSP’s speaker protection v2 module. Connected data adds a known issue description (Buffer Over-read in Audio) and notes a transient DoS can occur while processing channel information. Affected component appears to be the ADSP audio path used for speaker...
CVE-2023-33090 Buffer Over-read in Audio
Transient DOS while processing channel information for speaker protection v2 module in ADSP...
CVE-2023-33086 Improper Release of Memory Before Removing Last Reference in Data Modem
Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers...
CVE-2023-33086
CVE-2023-33086 affects Qualcomm closed‑source components. The issue is a transient Denial of Service when processing multiple IKEV2 Informational Requests from an IPsec server with different identifiers, leading to high impact on availability. CVSS 3.1 base score 7.5 (Network, Low attack complexi...
CVE-2023-33086 Improper Release of Memory Before Removing Last Reference in Data Modem
Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers...
CVE-2023-33084 Improper Release of Memory Before Removing Last Reference in Data Modem
Transient DOS while processing IE fragments from server during DTLS handshake...
CVE-2023-33084
CVE-2023-33084 is a transient Denial-of-Service during processing of IE fragments from a server in the DTLS handshake. The primary sources describe the issue as a DoS affecting Qualcomm chipsets and related closed-source components; exploitation details and affected versions are not publicly enum...
PT-2024-12409 · Qualcomm · Snapdragon +44
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a Transient Denial of Service DOS that occurs while processing CAG info IE received from NW. No information is provided about th...
PT-2024-13112 · Qualcomm · Snapdragon +141
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves a transient Denial of Service DOS that occurs when processing an improperly formatted 802.11az Fine Time Measurement protocol frame. ...
PT-2024-12410 · Qualcomm · 315 5G Iot Modem Firmware +107
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a Transient Denial of Service DOS that occurs while processing a PDU Release command with a PDU ID parameter that is out of rang...
PT-2024-12399 · Openssl · Openssl
Name of the Vulnerable Software and Affected Versions: OpenSSL affected versions not specified Description: The issue is related to a transient Denial of Service DOS that occurs while processing IE fragments from a server during a DTLS handshake. Recommendations: At the moment, there is no...
Royal Elementor Kit < 1.0.117 - Missing Authorization to Arbitrary Transient Update
Description The Royal Elementor Kit theme for WordPress is vulnerable to unauthorized arbitrary transient update due to a missing capability check on the dismissedhandler function in all versions up to, and including, 1.0.116. This makes it possible for authenticated attackers, with subscriber...
