Page 3 of 710 results (0.001 seconds)

CVSS: 7.8EPSS: 0%CPEs: 448EXPL: 0

CVE-2024-21469 – Permissions, Privileges, and Access Control issues in TZ Secure OS

https://notcve.org/view.php?id=CVE-2024-21469

01 Jul 2024 — Memory corruption when an invoke call and a TEE call are bound for the same trusted application. Corrupción de la memoria cuando una llamada de invocación y una llamada TEE están vinculadas a la misma aplicación confiable. • https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html • CWE-264: Permissions, Privileges, and Access Controls CWE-787: Out-of-bounds Write •

CVSS: 7.8EPSS: 0%CPEs: 518EXPL: 0

CVE-2024-21465 – Buffer Over-read in Trusted Execution Environment

https://notcve.org/view.php?id=CVE-2024-21465

01 Jul 2024 — Memory corruption while processing key blob passed by the user. Corrupción de la memoria al procesar el blob de claves pasado por el usuario. • https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html • CWE-125: Out-of-bounds Read CWE-126: Buffer Over-read •

CVSS: 7.1EPSS: 0%CPEs: 622EXPL: 0

CVE-2024-21462 – Buffer Over-read in TZ Secure OS

https://notcve.org/view.php?id=CVE-2024-21462

01 Jul 2024 — Transient DOS while loading the TA ELF file. DOS transitorio mientras se carga el archivo TA ELF. • https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html • CWE-125: Out-of-bounds Read CWE-126: Buffer Over-read •

CVSS: 8.4EPSS: 0%CPEs: 626EXPL: 0

CVE-2024-21461 – Double Free in HLOS

https://notcve.org/view.php?id=CVE-2024-21461

01 Jul 2024 — Memory corruption while performing finish HMAC operation when context is freed by keymaster. Corrupción de la memoria al realizar la operación de finalización de HMAC cuando Keymaster libera el contexto. • https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html • CWE-415: Double Free •

CVSS: 7.8EPSS: 0%CPEs: 85EXPL: 0

CVE-2023-43521 – Use After Free in HLOS

https://notcve.org/view.php?id=CVE-2023-43521

06 May 2024 — Memory corruption when multiple listeners are being registered with the same file descriptor. Corrupción de la memoria cuando se registran varios oyentes con el mismo descriptor de archivo. • https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html • CWE-416: Use After Free •

CVSS: 7.8EPSS: 0%CPEs: 41EXPL: 0

CVE-2023-33084 – Improper Release of Memory Before Removing Last Reference in Data Modem

https://notcve.org/view.php?id=CVE-2023-33084

04 Mar 2024 — Transient DOS while processing IE fragments from server during DTLS handshake. DOS transitorio mientras se procesan fragmentos de IE desde el servidor durante el protocolo de enlace DTLS. • https://www.qualcomm.com/company/product-security/bulletins/march-2024-bulletin • CWE-401: Missing Release of Memory after Effective Lifetime •

CVSS: 10.0EPSS: 0%CPEs: 42EXPL: 0

CVE-2023-28582 – Buffer Copy Without Checking Size of Input in Data Modem

https://notcve.org/view.php?id=CVE-2023-28582

04 Mar 2024 — Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake. Corrupción de la memoria en Data Modem al verificar el mensaje de verificación de saludo durante el protocolo de enlace DTLS. • https://www.qualcomm.com/company/product-security/bulletins/march-2024-bulletin • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •

CVSS: 7.8EPSS: 0%CPEs: 624EXPL: 0

CVE-2023-43536 – Buffer Over-read in WLAN Firmware

https://notcve.org/view.php?id=CVE-2023-43536

06 Feb 2024 — Transient DOS while parse fils IE with length equal to 1. DOS transitorio mientras analiza fils IE con una longitud igual a 1. • https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin • CWE-126: Buffer Over-read •

CVSS: 7.8EPSS: 0%CPEs: 482EXPL: 0

CVE-2023-43533 – Buffer Over-read in WLAN Firmware

https://notcve.org/view.php?id=CVE-2023-43533

06 Feb 2024 — Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame. DOS transitorio en el firmware WLAN cuando la longitud de la baliza recibida es menor que la longitud de la frame de la baliza ieee802.11. • https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin • CWE-125: Out-of-bounds Read CWE-126: Buffer Over-read •

CVSS: 7.8EPSS: 0%CPEs: 578EXPL: 0

CVE-2023-43522 – NULL Pointer Dereference in WLAN Firmware

https://notcve.org/view.php?id=CVE-2023-43522

06 Feb 2024 — Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL. DOS transitorio durante el proceso de desencapsulación de claves, cuando la clave cifrada proporcionada está vacía o es NULL. • https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin • CWE-476: NULL Pointer Dereference •