Page 2 of 114 results (0.007 seconds)

CVSS: 7.8EPSS: 0%CPEs: 120EXPL: 0

CVE-2024-23369 – Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

https://notcve.org/view.php?id=CVE-2024-23369

07 Oct 2024 — Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers. • https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.8EPSS: 0%CPEs: 95EXPL: 0

CVE-2024-33020 – Buffer Over-read in WLAN HOST

https://notcve.org/view.php?id=CVE-2024-33020

05 Aug 2024 — Transient DOS while processing TID-to-link mapping IE elements. • https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html • CWE-126: Buffer Over-read •

CVSS: 8.4EPSS: 0%CPEs: 69EXPL: 0

CVE-2024-23383 – Use After Free in Graphics Linux

https://notcve.org/view.php?id=CVE-2024-23383

05 Aug 2024 — Memory corruption when kernel driver attempts to trigger hardware fences. • https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html • CWE-416: Use After Free •

CVSS: 8.4EPSS: 0%CPEs: 70EXPL: 0

CVE-2024-23381 – Use After Free in Graphics Linux

https://notcve.org/view.php?id=CVE-2024-23381

05 Aug 2024 — Memory corruption when memory mapped in a VBO is not unmapped by the GPU SMMU. • https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html • CWE-416: Use After Free •

CVSS: 6.5EPSS: 0%CPEs: 25EXPL: 0

CVE-2024-23350 – Reachable Assertion in Multi Mode Call Processor

https://notcve.org/view.php?id=CVE-2024-23350

05 Aug 2024 — Permanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR container whose integrity check has failed, and the other is LPP where UE needs to send status message to network. • https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html • CWE-617: Reachable Assertion •

CVSS: 8.4EPSS: 0%CPEs: 212EXPL: 0

CVE-2024-23380 – Use After Free in Graphics

https://notcve.org/view.php?id=CVE-2024-23380

01 Jul 2024 — Memory corruption while handling user packets during VBO bind operation. Corrupción de la memoria al manejar paquetes de usuario durante la operación de enlace VBO. • https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html • CWE-416: Use After Free •

CVSS: 8.4EPSS: 0%CPEs: 444EXPL: 0

CVE-2024-23373 – Use After Free in Graphics

https://notcve.org/view.php?id=CVE-2024-23373

01 Jul 2024 — Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released. Corrupción de la memoria cuando falla la operación de desasignación de IOMMU, se liberan los búferes DMA y anon. • https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html • CWE-416: Use After Free •

CVSS: 8.4EPSS: 0%CPEs: 222EXPL: 0

CVE-2024-23372 – Integer Overflow or Wraparound in Graphics

https://notcve.org/view.php?id=CVE-2024-23372

01 Jul 2024 — Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than expected size. La memoria se daña al invocar una llamada IOCTL para la asignación de memoria de la GPU y el parámetro de tamaño es mayor que el tamaño esperado. • https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html • CWE-190: Integer Overflow or Wraparound •

CVSS: 7.8EPSS: 0%CPEs: 686EXPL: 0

CVE-2024-23368 – Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Qualcomm IPC

https://notcve.org/view.php?id=CVE-2024-23368

01 Jul 2024 — Memory corruption when allocating and accessing an entry in an SMEM partition. Corrupción de la memoria al asignar y acceder a una entrada en una partición SMEM. • https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •

CVSS: 7.8EPSS: 0%CPEs: 448EXPL: 0

CVE-2024-21469 – Permissions, Privileges, and Access Control issues in TZ Secure OS

https://notcve.org/view.php?id=CVE-2024-21469

01 Jul 2024 — Memory corruption when an invoke call and a TEE call are bound for the same trusted application. Corrupción de la memoria cuando una llamada de invocación y una llamada TEE están vinculadas a la misma aplicación confiable. • https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html • CWE-264: Permissions, Privileges, and Access Controls CWE-787: Out-of-bounds Write •