CVE-2023-33063

CVE-2023-33063 is a Use-After-Free/memory corruption issue in Qualcomm DSP Services triggered by a remote call from HLOS to DSP. Affected: Qualcomm chipsets with DSP Services; root cause: memory corruption leading to potential unintended behavior. Documents indicate high impact (confidentiality, ...

CVE-2023-33059

Mode C: CVE-2023-33059 concerns memory corruption in the Audio component when processing VOC packet data from ADSP, affecting Qualcomm audio/ADSP stacks. Root cause cited across connected sources as a buffer/memory handling issue in VOC packet processing with high impact on confidentiality, integ...

CVE-2022-33231

CVE-2022-33231 describes memory corruption due to a double free in the core during initialization of the encryption key. The vulnerability is listed for Qualcomm closed‑source components; multiple CVE trackers (NVD, Red Hat advisory, CVE.org) reflect the same root cause. The Android bulletin indi...

CVE-2023-28571

CVE-2023-28571 describes an information-disclosure flaw in WLAN HOST while processing the WLAN scan descriptor list during roaming scans. Public documents (NVD, Red Hat, PRION, vuln enrichment) consistently refer to information disclosure with CVSS metrics indicating a local attacker with low com...

CVE-2023-28537

CVE-2023-28537 corresponds to a memory corruption issue during memory allocation in the COmxApeDec module of Audio. In the provided documents, this vulnerability is linked to Qualcomm closed‑source components and is listed in the Qualcomm August 2023 security bulletin; Android’s August 2023 secur...

CVE-2023-33018

CVE-2023-33018 describes a memory corruption in the Qualcomm UIM (User Identity Module) related to the diag command used to retrieve the operator’s name. The CVE is rated HIGH with a CVSS v3.1 base score of 7.8 (LOCAL attack vector, LOW attack complexity, LOW privileges required, no user interact...

CVE-2023-33054

CVE-2023-33054 is linked to a cryptographic issue in the Qualcomm GPS HLOS Driver during GNSS assistance data download. Connected PT-12561 entries and vendor bulletins corroborate the GPS HLOS Driver context, but none of the connected documents provide concrete affected versions, root-cause detai...

CVE-2023-33027

CVE-2023-33027 denotes a transient Denial of Service in WLAN firmware when parsing RSN IEs. Affected are Qualcomm WLAN components and related closed-source firmware; the NVD entry lists Network attack vector, no user interaction, low attack complexity, but availability impact is high (CVE-2023-33...

CVE-2023-33024

CVE-2023-33024 : The issue is a classic buffer overflow in the Radio Interface Layer, caused by a buffer copy without checking input size, leading to memory corruption when processing SMS from AP firmware. Connected documents corroborate memory corruption in AP firmware SMS handling; the CVE titl...

CVE-2023-28560

Summary (CVE-2023-28560): Memory corruption in the WLAN HAL of Qualcomm chipsets triggered while processing the devIndex from an untrusted WMI payload. This affects WLAN HAL code paths and can impact confidentiality, integrity, and availability as indicated by the CVSS vector (Local access, Low c...

CVE-2023-33080

CVE-2023-33080 is a Qualcomm WLAN firmware issue described as a transient Denial-of-Service that occurs when parsing a vendor-specific Information Element in a reassociation response management frame. The CVE is classified with a CVSSv3.1 base score of 7.5 (Network, Low crew, No user interaction;...