CVE-2023-28546 – Buffer Copy Without Checking Size of Input in SPS Applications
https://notcve.org/view.php?id=CVE-2023-28546
Memory Corruption in SPS Application while exporting public key in sorter TA. Corrupción de la memoria en la aplicación SPS al exportar la clave pública en el clasificador TA. • https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVE-2023-22668 – Use After Free in Audio
https://notcve.org/view.php?id=CVE-2023-22668
Memory Corruption in Audio while invoking IOCTLs calls from the user-space. Corrupción de la memoria en el audio al invocar llamadas IOCTL desde el espacio de usuario. • https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin • CWE-416: Use After Free •
CVE-2023-22383 – Use After Free in Camera
https://notcve.org/view.php?id=CVE-2023-22383
Memory Corruption in camera while installing a fd for a particular DMA buffer. Corrupción de la memoria en la cámara al instalar un fd para un búfer DMA en particular. • https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin • CWE-416: Use After Free CWE-787: Out-of-bounds Write •
CVE-2023-21634 – Improper Restriction of Operations within the Bounds of a Memory Buffer in Radio Interface Layer
https://notcve.org/view.php?id=CVE-2023-21634
Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM. Corrupción de la memoria en la capa de interfaz de radio al enviar un SMS o escribir un SMS en la SIM. • https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-787: Out-of-bounds Write •
CVE-2023-33059 – Buffer Copy Without Checking Size of Input in Audio
https://notcve.org/view.php?id=CVE-2023-33059
Memory corruption in Audio while processing the VOC packet data from ADSP. Corrupción de la memoria en Audio mientras se procesan los datos del paquete VOC desde ADSP. • https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin • CWE-191: Integer Underflow (Wrap or Wraparound) CWE-787: Out-of-bounds Write •