Page 2 of 99 results (0.007 seconds)

CVSS: 7.8EPSS: 0%CPEs: 448EXPL: 0

CVE-2024-21469 – Permissions, Privileges, and Access Control issues in TZ Secure OS

https://notcve.org/view.php?id=CVE-2024-21469

01 Jul 2024 — Memory corruption when an invoke call and a TEE call are bound for the same trusted application. Corrupción de la memoria cuando una llamada de invocación y una llamada TEE están vinculadas a la misma aplicación confiable. • https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html • CWE-264: Permissions, Privileges, and Access Controls CWE-787: Out-of-bounds Write •

CVSS: 7.8EPSS: 0%CPEs: 518EXPL: 0

CVE-2024-21465 – Buffer Over-read in Trusted Execution Environment

https://notcve.org/view.php?id=CVE-2024-21465

01 Jul 2024 — Memory corruption while processing key blob passed by the user. Corrupción de la memoria al procesar el blob de claves pasado por el usuario. • https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html • CWE-125: Out-of-bounds Read CWE-126: Buffer Over-read •

CVSS: 7.1EPSS: 0%CPEs: 622EXPL: 0

CVE-2024-21462 – Buffer Over-read in TZ Secure OS

https://notcve.org/view.php?id=CVE-2024-21462

01 Jul 2024 — Transient DOS while loading the TA ELF file. DOS transitorio mientras se carga el archivo TA ELF. • https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html • CWE-125: Out-of-bounds Read CWE-126: Buffer Over-read •

CVSS: 8.4EPSS: 0%CPEs: 626EXPL: 0

CVE-2024-21461 – Double Free in HLOS

https://notcve.org/view.php?id=CVE-2024-21461

01 Jul 2024 — Memory corruption while performing finish HMAC operation when context is freed by keymaster. Corrupción de la memoria al realizar la operación de finalización de HMAC cuando Keymaster libera el contexto. • https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html • CWE-415: Double Free •

CVSS: 7.1EPSS: 0%CPEs: 30EXPL: 0

CVE-2024-21460 – Use of Insufficiently Random Values in Core

https://notcve.org/view.php?id=CVE-2024-21460

01 Jul 2024 — Information disclosure when ASLR relocates the IMEM and Secure DDR portions as one chunk in virtual address space. Divulgación de información cuando ASLR reubica las partes IMEM y DDR segura como un solo fragmento en el espacio de direcciones virtuales. • https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html • CWE-330: Use of Insufficiently Random Values •

CVSS: 7.5EPSS: 0%CPEs: 26EXPL: 0

CVE-2023-33100 – Improper input validation in Multi-Mode Call Processor

https://notcve.org/view.php?id=CVE-2023-33100

01 Apr 2024 — Transient DOS while processing DL NAS Transport message when message ID is not defined in the 3GPP specification. DOS transitorio mientras se procesa el mensaje de transporte DL NAS cuando el ID del mensaje no está definido en la especificación 3GPP. • https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2024-bulletin.html • CWE-20: Improper Input Validation •

CVSS: 7.8EPSS: 0%CPEs: 41EXPL: 0

CVE-2023-33084 – Improper Release of Memory Before Removing Last Reference in Data Modem

https://notcve.org/view.php?id=CVE-2023-33084

04 Mar 2024 — Transient DOS while processing IE fragments from server during DTLS handshake. DOS transitorio mientras se procesan fragmentos de IE desde el servidor durante el protocolo de enlace DTLS. • https://www.qualcomm.com/company/product-security/bulletins/march-2024-bulletin • CWE-401: Missing Release of Memory after Effective Lifetime •

CVSS: 10.0EPSS: 0%CPEs: 42EXPL: 0

CVE-2023-28582 – Buffer Copy Without Checking Size of Input in Data Modem

https://notcve.org/view.php?id=CVE-2023-28582

04 Mar 2024 — Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake. Corrupción de la memoria en Data Modem al verificar el mensaje de verificación de saludo durante el protocolo de enlace DTLS. • https://www.qualcomm.com/company/product-security/bulletins/march-2024-bulletin • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •

CVSS: 7.8EPSS: 0%CPEs: 624EXPL: 0

CVE-2023-43536 – Buffer Over-read in WLAN Firmware

https://notcve.org/view.php?id=CVE-2023-43536

06 Feb 2024 — Transient DOS while parse fils IE with length equal to 1. DOS transitorio mientras analiza fils IE con una longitud igual a 1. • https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin • CWE-126: Buffer Over-read •

CVSS: 10.0EPSS: 0%CPEs: 132EXPL: 0

CVE-2023-43534 – Use of Out-of-range Pointer Offset in WLAN HOST

https://notcve.org/view.php?id=CVE-2023-43534

06 Feb 2024 — Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point. Corrupción de la memoria al validar el TID para el frame de solicitud de acción de Mapeo de enlaces, cuando una estación se conecta a un punto de acceso. • https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-823: Use of Out-of-range Pointer Offset •