CVE-2023-22383 – Use After Free in Camera
https://notcve.org/view.php?id=CVE-2023-22383
05 Dec 2023 — Memory Corruption in camera while installing a fd for a particular DMA buffer. Corrupción de la memoria en la cámara al instalar un fd para un búfer DMA en particular. • https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin • CWE-416: Use After Free CWE-787: Out-of-bounds Write •
CVE-2023-21634 – Improper Restriction of Operations within the Bounds of a Memory Buffer in Radio Interface Layer
https://notcve.org/view.php?id=CVE-2023-21634
05 Dec 2023 — Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM. Corrupción de la memoria en la capa de interfaz de radio al enviar un SMS o escribir un SMS en la SIM. • https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-787: Out-of-bounds Write •
CVE-2023-28572 – Buffer Over-read in WLAN HOST
https://notcve.org/view.php?id=CVE-2023-28572
07 Nov 2023 — Memory corruption in WLAN HOST while processing the WLAN scan descriptor list. Corrupción de la memoria en WLAN HOST mientras se procesa la lista de descriptores de escaneo de WLAN. • https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin • CWE-126: Buffer Over-read CWE-787: Out-of-bounds Write •
CVE-2023-28570 – Buffer Copy without Checking Size of Input in Audio
https://notcve.org/view.php?id=CVE-2023-28570
07 Nov 2023 — Memory corruption while processing audio effects. Corrupción de la memoria al procesar efectos de audio. • https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') CWE-787: Out-of-bounds Write •
CVE-2023-28556 – Improper Authorization in HLOS
https://notcve.org/view.php?id=CVE-2023-28556
07 Nov 2023 — Cryptographic issue in HLOS during key management. Problema criptográfico en HLOS durante la gestión de claves. • https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin • CWE-285: Improper Authorization •
CVE-2023-28554 – Buffer Over-read in Qualcomm IPC
https://notcve.org/view.php?id=CVE-2023-28554
07 Nov 2023 — Information Disclosure in Qualcomm IPC while reading values from shared memory in VM. Divulgación de información en Qualcomm IPC mientras se leen valores de la memoria compartida en VM. • https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin • CWE-126: Buffer Over-read •
CVE-2023-28553 – Buffer Over-read in WLAN Host
https://notcve.org/view.php?id=CVE-2023-28553
07 Nov 2023 — Information Disclosure in WLAN Host when processing WMI event command. Divulgación de información en WLAN Host al procesar el comando de evento WMI. • https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin • CWE-126: Buffer Over-read •
CVE-2023-28545 – Improper Restriction of Operations within the Bounds of a Memory Buffer in TZ Secure OS
https://notcve.org/view.php?id=CVE-2023-28545
07 Nov 2023 — Memory corruption in TZ Secure OS while loading an app ELF. Corrupción de la memoria en TZ Secure OS al cargar una aplicación ELF. • https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-787: Out-of-bounds Write •
CVE-2023-24852 – Improper Authentication in Core
https://notcve.org/view.php?id=CVE-2023-24852
07 Nov 2023 — Memory Corruption in Core due to secure memory access by user while loading modem image. Corrupción de la memoria en Core debido al acceso seguro a la memoria por parte del usuario mientras carga la imagen del módem. • https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin • CWE-287: Improper Authentication CWE-787: Out-of-bounds Write •
CVE-2023-22388 – Use of Out-of-range Pointer Offset in Multi-mode Call Processor
https://notcve.org/view.php?id=CVE-2023-22388
07 Nov 2023 — Memory Corruption in Multi-mode Call Processor while processing bit mask API. Corrupción de la memoria en Multi-mode Call Processor mientras se procesa la API de máscara de bits. • https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin • CWE-787: Out-of-bounds Write CWE-823: Use of Out-of-range Pointer Offset •