CVSS: 7.8EPSS: 0%CPEs: 330EXPL: 0CVE-2023-33031 – Buffer Copy Without Checking Size of Input in Automotive Audio
https://notcve.org/view.php?id=CVE-2023-33031
Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer. Corrupción de la memoria en Automotive Audio al copiar datos del búfer compartido ADSP al búfer de datos del paquete VOC. • https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') CWE-787: Out-of-bounds Write •
CVSS: 9.0EPSS: 0%CPEs: 156EXPL: 0CVE-2023-28574 – Improper Input Validation in Core
https://notcve.org/view.php?id=CVE-2023-28574
Memory corruption in core services when Diag handler receives a command to configure event listeners. Corrupción de la memoria en los servicios principales cuando Diag handler recibe un comando para configurar los detectores de eventos. • https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin • CWE-20: Improper Input Validation CWE-787: Out-of-bounds Write •
CVSS: 6.1EPSS: 0%CPEs: 422EXPL: 0CVE-2023-28569 – Buffer Over-read in WLAN HAL
https://notcve.org/view.php?id=CVE-2023-28569
Information disclosure in WLAN HAL while handling command through WMI interfaces. Divulgación de información en WLAN HAL mientras se manejan comandos a través de interfaces WMI. • https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin • CWE-126: Buffer Over-read •
CVSS: 6.1EPSS: 0%CPEs: 466EXPL: 0CVE-2023-28563 – Buffer Over-read in IOE Firmware
https://notcve.org/view.php?id=CVE-2023-28563
Information disclosure in IOE Firmware while handling WMI command. Divulgación de información en IOE Firmware mientras se maneja el comando WMI. • https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin • CWE-126: Buffer Over-read •
CVSS: 7.8EPSS: 0%CPEs: 458EXPL: 0CVE-2023-28556 – Improper Authorization in HLOS
https://notcve.org/view.php?id=CVE-2023-28556
Cryptographic issue in HLOS during key management. Problema criptográfico en HLOS durante la gestión de claves. • https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin • CWE-285: Improper Authorization •