CVSS: 7.5EPSS: 0%CPEs: 142EXPL: 0CVE-2023-28555 – Buffer Over-read in Audio
https://notcve.org/view.php?id=CVE-2023-28555
Transient DOS in Audio while remapping channel buffer in media codec decoding. DOS transitorio en Audio mientras se remapea el buffer de canal en la decodificación de codecs multimedia. • https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin • CWE-125: Out-of-bounds Read CWE-126: Buffer Over-read •
CVSS: 8.4EPSS: 0%CPEs: 366EXPL: 0CVE-2023-28537 – Integer Overflow or Wraparound in Audio
https://notcve.org/view.php?id=CVE-2023-28537
Memory corruption while allocating memory in COmxApeDec module in Audio. Corrupción de memoria al asignar memoria en el módulo COmxApeDec en Audio. • https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin • CWE-190: Integer Overflow or Wraparound CWE-787: Out-of-bounds Write •
CVSS: 8.4EPSS: 0%CPEs: 344EXPL: 0CVE-2023-22666 – Integer Overflow or Wraparound in Audio
https://notcve.org/view.php?id=CVE-2023-22666
Memory Corruption in Audio while playing amrwbplus clips with modified content. Corrupción de memoria en audio al reproducir clips amrwbplus con contenido modificado. • https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin • CWE-190: Integer Overflow or Wraparound CWE-787: Out-of-bounds Write •
CVSS: 7.7EPSS: 0%CPEs: 240EXPL: 0CVE-2023-21652 – Key Management Errors in HLOS
https://notcve.org/view.php?id=CVE-2023-21652
Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use. Problema criptográfico en HLOS ya que las claves derivadas utilizadas para cifrar/descifrar información están presentes en la pila después de su uso. • https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin • CWE-320: Key Management Errors CWE-798: Use of Hard-coded Credentials •
CVSS: 7.8EPSS: 0%CPEs: 102EXPL: 0CVE-2023-21650 – Improper Validation of Array Index in GPS HLOS Driver
https://notcve.org/view.php?id=CVE-2023-21650
Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length. Corrupción de memoria en el controlador GPS HLOS cuando injectFdclData recibe datos con una longitud de datos no válida. • https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin • CWE-129: Improper Validation of Array Index CWE-787: Out-of-bounds Write •