CVSS: 8.4EPSS: 0%CPEs: 114EXPL: 0CVE-2023-21672 – Use After Free in Audio
https://notcve.org/view.php?id=CVE-2023-21672
Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions. • https://www.qualcomm.com/company/product-security/bulletins/july-2023-bulletin • CWE-416: Use After Free •
CVSS: 7.8EPSS: 0%CPEs: 30EXPL: 0CVE-2023-21641 – Permissions, Privileges, and Access Controls in Display
https://notcve.org/view.php?id=CVE-2023-21641
An app with non-privileged access can change global system brightness and cause undesired system behavior. • https://www.qualcomm.com/company/product-security/bulletins/july-2023-bulletin • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.8EPSS: 0%CPEs: 44EXPL: 0CVE-2023-21639 – Buffer Copy Without Checking the Size of Input in Audio
https://notcve.org/view.php?id=CVE-2023-21639
Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client. • https://www.qualcomm.com/company/product-security/bulletins/july-2023-bulletin • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 72EXPL: 0CVE-2023-21638 – Incorrect Type Conversion or Cast in Video
https://notcve.org/view.php?id=CVE-2023-21638
Memory corruption in Video while calling APIs with different instance ID than the one received in initialization. • https://www.qualcomm.com/company/product-security/bulletins/july-2023-bulletin • CWE-704: Incorrect Type Conversion or Cast •
CVSS: 7.8EPSS: 0%CPEs: 110EXPL: 0CVE-2023-21637 – Improper Restrictions of Operations within the Bounds of a Memory Buffer in Linux
https://notcve.org/view.php?id=CVE-2023-21637
Memory corruption in Linux while calling system configuration APIs. • https://www.qualcomm.com/company/product-security/bulletins/july-2023-bulletin • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-787: Out-of-bounds Write •