CVE-2023-33099 – Improper Input Validation in Multi-Mode Call Processor
https://notcve.org/view.php?id=CVE-2023-33099
Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR. DOS transitorio mientras se procesa un contenedor de SMS de tamaño no estándar recibido en el transporte DL NAS en NR. • https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2024-bulletin.html • CWE-20: Improper Input Validation •
CVE-2023-33023 – Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in SPS-Applications
https://notcve.org/view.php?id=CVE-2023-33023
Memory corruption while processing finish_sign command to pass a rsp buffer. Corrupción de la memoria al procesar el comando Finish_sign para pasar un búfer rsp. • https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2024-bulletin.html • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVE-2023-28547 – Buffer Copy Without Checking Size of Input in SPS Applications
https://notcve.org/view.php?id=CVE-2023-28547
Memory corruption in SPS Application while requesting for public key in sorter TA. Corrupción de la memoria en la aplicación SPS al solicitar la clave pública en el clasificador TA. • https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2024-bulletin.html • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVE-2023-43548 – Buffer Copy Without Checking Size of Input in Video
https://notcve.org/view.php?id=CVE-2023-43548
Memory corruption while parsing qcp clip with invalid chunk data size. Corrupción de la memoria al analizar el clip qcp con un tamaño de fragmento de datos no válido. • https://www.qualcomm.com/company/product-security/bulletins/march-2024-bulletin • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVE-2023-33104 – Improper input Validation in Multi-Mode Call Processor
https://notcve.org/view.php?id=CVE-2023-33104
Transient DOS while processing PDU Release command with a parameter PDU ID out of range. DOS transitorio mientras se procesa el comando de liberación de PDU con un ID de PDU de parámetro fuera de rango. • https://www.qualcomm.com/company/product-security/bulletins/march-2024-bulletin • CWE-20: Improper Input Validation •