CVSS: 7.8EPSS: 0%CPEs: 448EXPL: 0CVE-2024-21469 – Permissions, Privileges, and Access Control issues in TZ Secure OS
https://notcve.org/view.php?id=CVE-2024-21469
01 Jul 2024 — Memory corruption when an invoke call and a TEE call are bound for the same trusted application. Corrupción de la memoria cuando una llamada de invocación y una llamada TEE están vinculadas a la misma aplicación confiable. • https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html • CWE-264: Permissions, Privileges, and Access Controls CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 518EXPL: 0CVE-2024-21465 – Buffer Over-read in Trusted Execution Environment
https://notcve.org/view.php?id=CVE-2024-21465
01 Jul 2024 — Memory corruption while processing key blob passed by the user. Corrupción de la memoria al procesar el blob de claves pasado por el usuario. • https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html • CWE-125: Out-of-bounds Read CWE-126: Buffer Over-read •
CVSS: 7.1EPSS: 0%CPEs: 622EXPL: 0CVE-2024-21462 – Buffer Over-read in TZ Secure OS
https://notcve.org/view.php?id=CVE-2024-21462
01 Jul 2024 — Transient DOS while loading the TA ELF file. DOS transitorio mientras se carga el archivo TA ELF. • https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html • CWE-125: Out-of-bounds Read CWE-126: Buffer Over-read •
CVSS: 8.4EPSS: 0%CPEs: 626EXPL: 0CVE-2024-21461 – Double Free in HLOS
https://notcve.org/view.php?id=CVE-2024-21461
01 Jul 2024 — Memory corruption while performing finish HMAC operation when context is freed by keymaster. Corrupción de la memoria al realizar la operación de finalización de HMAC cuando Keymaster libera el contexto. • https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html • CWE-415: Double Free •
CVSS: 7.1EPSS: 0%CPEs: 30EXPL: 0CVE-2024-21460 – Use of Insufficiently Random Values in Core
https://notcve.org/view.php?id=CVE-2024-21460
01 Jul 2024 — Information disclosure when ASLR relocates the IMEM and Secure DDR portions as one chunk in virtual address space. Divulgación de información cuando ASLR reubica las partes IMEM y DDR segura como un solo fragmento en el espacio de direcciones virtuales. • https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html • CWE-330: Use of Insufficiently Random Values •
CVSS: 8.4EPSS: 0%CPEs: 12EXPL: 0CVE-2024-23360 – Improper Access Control in Graphics Windows
https://notcve.org/view.php?id=CVE-2024-23360
03 Jun 2024 — Memory corruption while creating a LPAC client as LPAC engine was allowed to access GPU registers. Corrupción de la memoria al crear un cliente LPAC, ya que al motor LPAC se le permitió acceder a los registros de GPU. • https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html • CWE-284: Improper Access Control •
CVSS: 8.4EPSS: 0%CPEs: 25EXPL: 0CVE-2024-21474 – Stack-based Buffer Overflow in PMIC
https://notcve.org/view.php?id=CVE-2024-21474
06 May 2024 — Memory corruption when size of buffer from previous call is used without validation or re-initialization. Corrupción de la memoria cuando se utiliza el tamaño del búfer de la llamada anterior sin validación o reinicialización. • https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html • CWE-121: Stack-based Buffer Overflow •
CVSS: 8.4EPSS: 0%CPEs: 38EXPL: 0CVE-2024-21472 – Use After Free in Kernel
https://notcve.org/view.php?id=CVE-2024-21472
01 Apr 2024 — Memory corruption in Kernel while handling GPU operations. Corrupción de la memoria en el Kernel al manejar operaciones de GPU. • https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2024-bulletin.html • CWE-416: Use After Free •
CVSS: 7.8EPSS: 0%CPEs: 41EXPL: 0CVE-2023-33084 – Improper Release of Memory Before Removing Last Reference in Data Modem
https://notcve.org/view.php?id=CVE-2023-33084
04 Mar 2024 — Transient DOS while processing IE fragments from server during DTLS handshake. DOS transitorio mientras se procesan fragmentos de IE desde el servidor durante el protocolo de enlace DTLS. • https://www.qualcomm.com/company/product-security/bulletins/march-2024-bulletin • CWE-401: Missing Release of Memory after Effective Lifetime •
CVSS: 10.0EPSS: 0%CPEs: 42EXPL: 0CVE-2023-28582 – Buffer Copy Without Checking Size of Input in Data Modem
https://notcve.org/view.php?id=CVE-2023-28582
04 Mar 2024 — Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake. Corrupción de la memoria en Data Modem al verificar el mensaje de verificación de saludo durante el protocolo de enlace DTLS. • https://www.qualcomm.com/company/product-security/bulletins/march-2024-bulletin • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •