Page 12 of 176 results (0.002 seconds)

CVSS: 7.8EPSS: 0%CPEs: 368EXPL: 0

CVE-2023-21670 – Improper Access control in GPU Subsystem

https://notcve.org/view.php?id=CVE-2023-21670

Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode. Qualcomm Adreno/KGSL suffers from an issue where code in user-writable mapping is executed in non-protected mode. • http://packetstormsecurity.com/files/173296/Qualcomm-Adreno-KGSL-Insecure-Execution.html https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin • CWE-284: Improper Access Control CWE-863: Incorrect Authorization •

CVSS: 7.5EPSS: 0%CPEs: 540EXPL: 0

CVE-2023-21659 – Buffer Over-read in WLAN Firmware

https://notcve.org/view.php?id=CVE-2023-21659

Transient DOS in WLAN Firmware while processing frames with missing header fields. • https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin • CWE-125: Out-of-bounds Read CWE-126: Buffer Over-read •

CVSS: 7.5EPSS: 0%CPEs: 302EXPL: 0

CVE-2023-21658 – Buffer Over-Read in WLAN Firmware

https://notcve.org/view.php?id=CVE-2023-21658

Transient DOS in WLAN Firmware while processing the received beacon or probe response frame. • https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin • CWE-125: Out-of-bounds Read CWE-126: Buffer Over-read •

CVSS: 6.2EPSS: 0%CPEs: 220EXPL: 0

CVE-2022-40533 – Untrusted Pointer Dereference in Core

https://notcve.org/view.php?id=CVE-2022-40533

Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request. • https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-822: Untrusted Pointer Dereference •

CVSS: 7.8EPSS: 0%CPEs: 392EXPL: 0

CVE-2022-40529 – Improper access control in Kernel

https://notcve.org/view.php?id=CVE-2022-40529

Memory corruption due to improper access control in kernel while processing a mapping request from root process. • https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin • CWE-284: Improper Access Control CWE-863: Incorrect Authorization •