CVSS: 7.5EPSS: 0%CPEs: 232EXPL: 0CVE-2023-33056 – NULL Pointer dereference in WLAN Firmware
https://notcve.org/view.php?id=CVE-2023-33056
Transient DOS in WLAN Firmware when firmware receives beacon including T2LM IE. DOS transitorio en WLAN Firmware cuando el firmware recibe una baliza que incluye T2LM IE. • https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin • CWE-476: NULL Pointer Dereference •
CVSS: 7.5EPSS: 0%CPEs: 230EXPL: 0CVE-2023-33048 – Buffer over-read in WLAN Firmware
https://notcve.org/view.php?id=CVE-2023-33048
Transient DOS in WLAN Firmware while parsing t2lm buffers. DOS transitorio en WLAN Firmware mientras se analizan los buffers t2lm. • https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin • CWE-125: Out-of-bounds Read CWE-126: Buffer Over-read •
CVSS: 7.5EPSS: 0%CPEs: 356EXPL: 0CVE-2023-33047 – Buffer Over-read in WLAN Firmware
https://notcve.org/view.php?id=CVE-2023-33047
Transient DOS in WLAN Firmware while parsing no-inherit IES. DOS transitorio en WLAN Firmware mientras se analiza IES sin herencia. • https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin • CWE-125: Out-of-bounds Read CWE-126: Buffer Over-read •
CVSS: 9.8EPSS: 0%CPEs: 258EXPL: 0CVE-2023-33045 – Buffer Copy Without Checking Size of Input in WLAN Firmware
https://notcve.org/view.php?id=CVE-2023-33045
Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute. Corrupción de la memoria en WLAN Firmware al analizar una trama de administración de NAN que lleva un atributo S3. • https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') CWE-787: Out-of-bounds Write •
CVSS: 9.0EPSS: 0%CPEs: 156EXPL: 0CVE-2023-28574 – Improper Input Validation in Core
https://notcve.org/view.php?id=CVE-2023-28574
Memory corruption in core services when Diag handler receives a command to configure event listeners. Corrupción de la memoria en los servicios principales cuando Diag handler recibe un comando para configurar los detectores de eventos. • https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin • CWE-20: Improper Input Validation CWE-787: Out-of-bounds Write •