CVE-2023-24852 – Improper Authentication in Core
https://notcve.org/view.php?id=CVE-2023-24852
Memory Corruption in Core due to secure memory access by user while loading modem image. Corrupción de la memoria en Core debido al acceso seguro a la memoria por parte del usuario mientras carga la imagen del módem. • https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin • CWE-287: Improper Authentication CWE-787: Out-of-bounds Write •
CVE-2023-33028 – Buffer Copy without Checking Size of Input in WLAN Firmware
https://notcve.org/view.php?id=CVE-2023-33028
Memory corruption in WLAN Firmware while doing a memory copy of pmk cache. Corrupción de la memoria en el WLAN Firmware al realizar una copia de la memoria del caché pmk. • https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVE-2023-33027 – Buffer Over-read in WLAN Firmware
https://notcve.org/view.php?id=CVE-2023-33027
Transient DOS in WLAN Firmware while parsing rsn ies. DOS transitorio en el WLAN Firmware mientras se analiza rsn ies. • https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin • CWE-125: Out-of-bounds Read CWE-126: Buffer Over-read •
CVE-2023-33026 – Buffer over-read in WLAN Firmware
https://notcve.org/view.php?id=CVE-2023-33026
Transient DOS in WLAN Firmware while parsing a NAN management frame. DOS transitorio en el WLAN Firmware mientras se analiza un frame de administración NAN. • https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin • CWE-126: Buffer Over-read CWE-400: Uncontrolled Resource Consumption •
CVE-2023-28539 – Buffer Copy Without Checking Size of Input in WLAN Host
https://notcve.org/view.php?id=CVE-2023-28539
Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command. Corrupción de la memoria en WLAN Host cuando el firmware invoca varios comandos de servicio WMI disponible. • https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •