CVSS: 6.5EPSS: 0%CPEs: 6EXPL: 0CVE-2024-21459 – Buffer Over-read in WLAN HOST
https://notcve.org/view.php?id=CVE-2024-21459
Information disclosure while handling beacon or probe response frame in STA. • https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html • CWE-126: Buffer Over-read •
CVSS: 8.4EPSS: 0%CPEs: 1EXPL: 0CVE-2023-43554 – Improper Restriction of Operations withing the Bounds of a Memory Buffer in DSP Services
https://notcve.org/view.php?id=CVE-2023-43554
Memory corruption while processing IOCTL handler in FastRPC. • https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.1EPSS: 0%CPEs: 45EXPL: 0CVE-2023-43551 – Improper Authentication in Multi-Mode Call Processor
https://notcve.org/view.php?id=CVE-2023-43551
Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command. Problema criptográfico al realizar la conexión con una red LTE, una estación base no autorizada puede omitir la fase de autenticación y enviar inmediatamente el comando del modo de seguridad. • https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html • CWE-287: Improper Authentication •
CVSS: 7.8EPSS: 0%CPEs: 17EXPL: 0CVE-2023-43542 – Buffer Copy Without Checking Size of Input in Trusted Execution Environment
https://notcve.org/view.php?id=CVE-2023-43542
Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked. Corrupción de la memoria al copiar el material de un keyblob cuando el tamaño del material de la clave no se verifica con precisión. • https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 9.3EPSS: 0%CPEs: 11EXPL: 0CVE-2023-43538 – Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in TZ Secure OS
https://notcve.org/view.php?id=CVE-2023-43538
Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization. Corrupción de la memoria en TZ Secure OS durante la inicialización de Tunnel Invoke Manager. • https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •