Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-43503 State: PUBLISHED Published: 2023-11-14T11:03:45.149Z Last Updated: 2025-01-08T16:41:46.906Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: COMOS Problem Types: CWE-319 Description: A vulnerability has been identified in COMOS (All versions < V10.4.4). Caching system in the affected application leaks sensitive information such as user and project information in cleartext via UDP. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-137900.pdf
CVE ID: CVE-2023-43504 State: PUBLISHED Published: 2023-11-14T11:03:46.350Z Last Updated: 2025-01-08T16:40:40.776Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: COMOS Problem Types: CWE-120 Description: A vulnerability has been identified in COMOS (All versions < V10.4.4). Ptmcast executable used for testing cache validation service in affected application is vulnerable to Structured Exception Handler (SEH) based buffer overflow. This could allow an attacker to execute arbitrary code on the target system or cause denial of service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refere
or cause denial of service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-137900.pdf
CVE ID: CVE-2023-43505 State: PUBLISHED Published: 2023-11-14T11:03:47.546Z Last Updated: 2025-01-08T16:18:03.507Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: COMOS Problem Types: CWE-284 Description: A vulnerability has been identified in COMOS (All versions). The affected application lacks proper access controls in SMB shares. This could allow an attacker to access files that the user should not have access to. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-137900.pdf
CVE ID: CVE-2023-43506 State: PUBLISHED Published: 2023-10-24T18:08:31.010Z Last Updated: 2024-09-11T17:50:00.081Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba ClearPass Policy Manager Description: A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges to those of a higher role. A successful exploit allows malicious users to execute arbitrary code with root level privileges on the Linux instance. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/assets/alert/ARUB
t Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-016.txt
CVE ID: CVE-2023-43507 State: PUBLISHED Published: 2023-10-24T18:10:06.158Z Last Updated: 2024-09-11T17:46:38.200Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba ClearPass Policy Manager Description: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit this vulnerability to obtain and modify sensitive information in the underlying database potentially leading to complete compromise of the ClearPass Policy Manager cluster. Additional A
the underlying database potentially leading to complete compromise of the ClearPass Policy Manager cluster. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-016.txt
CVE ID: CVE-2023-43508 State: PUBLISHED Published: 2023-10-24T18:11:58.092Z Last Updated: 2024-09-11T14:29:44.188Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba ClearPass Policy Manager Description: Vulnerabilities in the web-based management interface of ClearPass Policy Manager allow an attacker with read-only privileges to perform actions that change the state of the ClearPass Policy Manager instance. Successful exploitation of these vulnerabilities allow an attacker to complete state-changing actions in the web-based management interface that should not be allowed by their current level of authorization
anging actions in the web-based management interface that should not be allowed by their current level of authorization on the platform. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-016.txt
CVE ID: CVE-2023-43509 State: PUBLISHED Published: 2023-10-24T18:13:15.076Z Last Updated: 2024-09-11T17:42:00.784Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba ClearPass Policy Manager Description: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to send notifications to computers that are running ClearPass OnGuard. These notifications can then be used to phish users or trick them into downloading malicious software. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetwor
tware. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-016.txt
CVE ID: CVE-2023-43510 State: PUBLISHED Published: 2023-10-24T18:14:37.992Z Last Updated: 2024-09-11T17:17:15.639Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba ClearPass Policy Manager Description: A vulnerability in the ClearPass Policy Manager web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as a non-privileged user on the underlying operating system leading to partial system compromise. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refe
m leading to partial system compromise. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-016.txt
CVE ID: CVE-2023-43511 State: PUBLISHED Published: 2024-01-02T05:38:53.528Z Last Updated: 2025-06-16T19:53:38.503Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-835 Description: Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE ID: CVE-2023-43512 State: PUBLISHED Published: 2024-01-02T05:38:55.097Z Last Updated: 2024-08-02T19:44:43.288Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS while parsing GATT service data when the total amount of memory that is required by the multiple services is greater than the actual size of the services buffer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE ID: CVE-2023-43513 State: PUBLISHED Published: 2024-02-06T05:47:15.705Z Last Updated: 2025-06-16T18:11:12.210Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-823 Description: Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin
CVE ID: CVE-2023-43514 State: PUBLISHED Published: 2024-01-02T05:38:56.273Z Last Updated: 2024-10-01T21:05:37.135Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE ID: CVE-2023-43515 State: PUBLISHED Published: 2024-04-01T15:05:59.198Z Last Updated: 2024-08-02T19:44:43.903Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption in HLOS while running kernel address sanitizers (syzkaller) on tmecom with DEBUG_FS enabled. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2024-bulletin.html
CVE ID: CVE-2023-43516 State: PUBLISHED Published: 2024-02-06T05:47:17.296Z Last Updated: 2025-05-15T19:45:03.696Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-823 Description: Memory corruption when malformed message payload is received from firmware. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin
CVE ID: CVE-2023-43517 State: PUBLISHED Published: 2024-02-06T05:47:18.589Z Last Updated: 2025-05-15T19:44:56.795Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-284 Description: Memory corruption in Automotive Multimedia due to improper access control in HAB. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin
CVE ID: CVE-2023-43518 State: PUBLISHED Published: 2024-02-06T05:47:19.935Z Last Updated: 2024-08-02T19:44:42.706Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-822 Description: Memory corruption in video while parsing invalid mp2 clip. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin
CVE ID: CVE-2023-43519 State: PUBLISHED Published: 2024-02-06T05:47:21.253Z Last Updated: 2024-08-02T19:44:42.886Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin
CVE ID: CVE-2023-43520 State: PUBLISHED Published: 2024-02-06T05:47:22.584Z Last Updated: 2025-05-09T16:29:04.339Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-121 Description: Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin
CVE ID: CVE-2023-43521 State: PUBLISHED Published: 2024-05-06T14:32:02.380Z Last Updated: 2024-08-02T19:44:42.853Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption when multiple listeners are being registered with the same file descriptor. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html
CVE ID: CVE-2023-43522 State: PUBLISHED Published: 2024-02-06T05:47:24.174Z Last Updated: 2024-08-21T20:34:17.830Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-476 Description: Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin
CVE ID: CVE-2023-43523 State: PUBLISHED Published: 2024-02-06T05:47:25.823Z Last Updated: 2025-06-17T21:29:26.384Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-617 Description: Transient DOS while processing 11AZ RTT management action frame received through OTA. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin
CVE ID: CVE-2023-43524 State: PUBLISHED Published: 2024-05-06T14:32:03.585Z Last Updated: 2024-08-02T19:44:42.864Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption when the bandpass filter order received from AHAL is not within the expected range. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html
CVE ID: CVE-2023-43525 State: PUBLISHED Published: 2024-05-06T14:32:04.797Z Last Updated: 2024-08-02T19:44:43.157Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption while copying the sound model data from user to kernel buffer during sound model register. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html
CVE ID: CVE-2023-43526 State: PUBLISHED Published: 2024-05-06T14:32:05.980Z Last Updated: 2024-08-02T19:44:43.825Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption while querying module parameters from Listen Sound model client in kernel from user space. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html
CVE ID: CVE-2023-43527 State: PUBLISHED Published: 2024-05-06T14:32:07.170Z Last Updated: 2024-08-15T15:19:46.942Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Information disclosure while parsing dts header atom in Video. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html
CVE ID: CVE-2023-43528 State: PUBLISHED Published: 2024-05-06T14:32:08.355Z Last Updated: 2024-08-02T19:44:43.328Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html
CVE ID: CVE-2023-43529 State: PUBLISHED Published: 2024-05-06T14:32:09.581Z Last Updated: 2024-08-02T19:44:43.778Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-617 Description: Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html
CVE ID: CVE-2023-43530 State: PUBLISHED Published: 2024-05-06T14:32:10.758Z Last Updated: 2024-08-02T19:44:43.809Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-190 Description: Memory corruption in HLOS while checking for the storage type. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html
CVE ID: CVE-2023-43531 State: PUBLISHED Published: 2024-05-06T14:32:11.964Z Last Updated: 2024-08-02T19:44:43.817Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-824 Description: Memory corruption while verifying the serialized header when the key pairs are generated. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html
CVE ID: CVE-2023-43532 State: PUBLISHED Published: 2024-02-06T05:47:27.132Z Last Updated: 2025-06-17T21:29:26.513Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-822 Description: Memory corruption while reading ACPI config through the user mode app. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin
CVE ID: CVE-2023-43533 State: PUBLISHED Published: 2024-02-06T05:47:28.736Z Last Updated: 2025-05-15T19:44:50.713Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin
CVE ID: CVE-2023-43534 State: PUBLISHED Published: 2024-02-06T05:47:30.353Z Last Updated: 2024-08-22T19:57:03.732Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-823 Description: Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin
CVE ID: CVE-2023-43535 State: PUBLISHED Published: 2024-02-06T05:47:31.730Z Last Updated: 2025-06-13T18:57:15.362Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-129 Description: Memory corruption when negative display IDs are sent as input while processing DISPLAYESCAPE event trigger. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin
CVE ID: CVE-2023-43536 State: PUBLISHED Published: 2024-02-06T05:47:33.289Z Last Updated: 2024-08-02T19:44:43.827Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS while parse fils IE with length equal to 1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin
CVE ID: CVE-2023-43537 State: PUBLISHED Published: 2024-06-03T10:05:12.949Z Last Updated: 2024-08-02T19:44:43.656Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Information disclosure while handling T2LM Action Frame in WLAN Host. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html
CVE ID: CVE-2023-43538 State: PUBLISHED Published: 2024-06-03T10:05:14.252Z Last Updated: 2024-08-02T19:44:43.850Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html
CVE ID: CVE-2023-43539 State: PUBLISHED Published: 2024-03-04T10:48:46.612Z Last Updated: 2024-08-12T18:20:32.754Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/march-2024-bulletin
CVE ID: CVE-2023-43540 State: PUBLISHED Published: 2024-03-04T10:48:47.976Z Last Updated: 2024-08-02T19:44:43.794Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption while processing the IOCTL FM HCI WRITE request. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/march-2024-bulletin
CVE ID: CVE-2023-43541 State: PUBLISHED Published: 2024-03-04T10:48:49.324Z Last Updated: 2024-08-12T18:20:17.854Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-476 Description: Memory corruption while invoking the SubmitCommands call on Gfx engine during the graphics render. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/march-2024-bulletin
CVE ID: CVE-2023-43542 State: PUBLISHED Published: 2024-06-03T10:05:15.885Z Last Updated: 2024-08-13T20:04:11.714Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html