CVSS: 10.0EPSS: 0%CPEs: 268EXPL: 0CVE-2023-43519 – Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Video
https://notcve.org/view.php?id=CVE-2023-43519
06 Feb 2024 — Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size. Corrupción de la memoria en el vídeo al analizar la información del vídeo, cuando el tamaño del átomo es mayor que el tamaño de la información del vídeo. • https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 10.0EPSS: 0%CPEs: 306EXPL: 0CVE-2023-43518 – Untrusted Pointer Dereference in Video
https://notcve.org/view.php?id=CVE-2023-43518
06 Feb 2024 — Memory corruption in video while parsing invalid mp2 clip. Corrupción de la memoria en el vídeo al analizar un clip mp2 no válido. • https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin • CWE-787: Out-of-bounds Write CWE-822: Untrusted Pointer Dereference •
CVSS: 8.4EPSS: 0%CPEs: 38EXPL: 0CVE-2023-43517 – Improper Access Control in Automotive Multimedia
https://notcve.org/view.php?id=CVE-2023-43517
06 Feb 2024 — Memory corruption in Automotive Multimedia due to improper access control in HAB. Corrupción de la memoria en Automotive Multimedia debido a un control de acceso inadecuado en HAB. • https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin • CWE-284: Improper Access Control CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 534EXPL: 0CVE-2023-43513 – Use of Out-of-range Pointer Offset in PCIe
https://notcve.org/view.php?id=CVE-2023-43513
06 Feb 2024 — Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element. Corrupción de la memoria al procesar el anillo de eventos, el puntero de lectura de contexto no es confiable para HLOS y cuando se pasa con valores arbitrarios, puede apuntar a la dirección en el medio del elemento del anillo. • https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin • CWE-787: Out-of-bounds Write CWE-823: Use of Out-of-range Pointer Offset •
CVSS: 7.8EPSS: 0%CPEs: 308EXPL: 0CVE-2023-33076 – Configuration Issue in Core
https://notcve.org/view.php?id=CVE-2023-33076
06 Feb 2024 — Memory corruption in Core when updating rollback version for TA and OTA feature is enabled. La corrupción de la memoria en Core cuando se habilita la actualización de la versión de reversión para la función TA y OTA. • https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin • CWE-16: Configuration CWE-787: Out-of-bounds Write •
CVSS: 9.3EPSS: 0%CPEs: 496EXPL: 0CVE-2023-33072 – Buffer copy without checking size of Input in Core
https://notcve.org/view.php?id=CVE-2023-33072
06 Feb 2024 — Memory corruption in Core while processing control functions. Corrupción de la memoria en Core durante el procesamiento de funciones de control. • https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 7.8EPSS: 0%CPEs: 98EXPL: 0CVE-2023-33046 – Time-of-check Time-of-use (TOCTOU) Race Condition in Trusted Execution Environment
https://notcve.org/view.php?id=CVE-2023-33046
06 Feb 2024 — Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation. Corrupción de la memoria en Trusted Execution Environment al desinicializar un objeto utilizado para la validación de la licencia. • https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin • CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition CWE-787: Out-of-bounds Write •
CVSS: 8.4EPSS: 0%CPEs: 166EXPL: 0CVE-2023-43514 – Use After Free in DSP Services
https://notcve.org/view.php?id=CVE-2023-43514
02 Jan 2024 — Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP. Corrupción de la memoria al invocar llamadas IOCTL desde el espacio de usuario para la memoria interna MAP y la memoria interna UNMAP. • https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin • CWE-416: Use After Free •
CVSS: 7.8EPSS: 0%CPEs: 718EXPL: 0CVE-2023-43511 – Loop with Unreachable Exit Condition (Infinite Loop) in WLAN Firmware
https://notcve.org/view.php?id=CVE-2023-43511
02 Jan 2024 — Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header. DOS transitorio mientras se analiza el encabezado de extensión IPv6 cuando el firmware WLAN recibe un paquete IPv6 que contiene "IPPROTO_NONE" como el siguiente encabezado. • https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin • CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') •
CVSS: 7.8EPSS: 0%CPEs: 464EXPL: 0CVE-2023-33120 – Use After Free in Audio
https://notcve.org/view.php?id=CVE-2023-33120
02 Jan 2024 — Memory corruption in Audio when memory map command is executed consecutively in ADSP. Corrupción de la memoria en audio cuando el comando de mapa de memoria se ejecuta consecutivamente en ADSP. • https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin • CWE-416: Use After Free •