Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-28539 State: PUBLISHED Published: 2023-10-03T05:00:35.349Z Last Updated: 2025-02-27T20:47:51.088Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
CVE ID: CVE-2023-28540 State: PUBLISHED Published: 2023-10-03T05:00:36.519Z Last Updated: 2025-02-27T20:47:44.136Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-287 Description: Cryptographic issue in Data Modem due to improper authentication during TLS handshake. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
CVE ID: CVE-2023-28541 State: PUBLISHED Published: 2023-07-04T04:46:44.316Z Last Updated: 2024-08-02T13:43:23.078Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Memory Corruption in Data Modem while processing DMA buffer release event about CFR data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/july-2023-bulletin
CVE ID: CVE-2023-28542 State: PUBLISHED Published: 2023-07-04T04:46:45.239Z Last Updated: 2024-08-02T13:43:22.689Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Memory Corruption in WLAN HOST while fetching TX status information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/july-2023-bulletin
CVE ID: CVE-2023-28543 State: PUBLISHED Published: 2023-09-05T06:29:28.266Z Last Updated: 2025-02-27T21:01:11.798Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-125 Description: A malformed DLC can trigger Memory Corruption in SNPE library due to out of bounds read, such as by loading an untrusted model (e.g. from a remote source). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE ID: CVE-2023-28544 State: PUBLISHED Published: 2023-09-05T06:24:08.152Z Last Updated: 2025-02-27T21:02:34.781Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE ID: CVE-2023-28545 State: PUBLISHED Published: 2023-11-07T05:26:32.849Z Last Updated: 2024-08-02T13:43:22.294Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-119 Description: Memory corruption in TZ Secure OS while loading an app ELF. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin
CVE ID: CVE-2023-28546 State: PUBLISHED Published: 2023-12-05T03:03:46.993Z Last Updated: 2024-08-02T13:43:22.490Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory Corruption in SPS Application while exporting public key in sorter TA. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin
CVE ID: CVE-2023-28547 State: PUBLISHED Published: 2024-04-01T15:05:49.478Z Last Updated: 2024-08-02T13:43:22.683Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption in SPS Application while requesting for public key in sorter TA. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2024-bulletin.html
CVE ID: CVE-2023-28548 State: PUBLISHED Published: 2023-09-05T06:24:09.548Z Last Updated: 2025-02-27T21:02:27.003Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-129 Description: Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE ID: CVE-2023-28549 State: PUBLISHED Published: 2023-09-05T06:24:11.272Z Last Updated: 2025-02-27T21:02:20.269Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-119 Description: Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE ID: CVE-2023-28550 State: PUBLISHED Published: 2023-12-05T03:03:48.538Z Last Updated: 2024-08-02T13:43:22.782Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-119 Description: Memory corruption in MPP performance while accessing DSM watermark using external memory address. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin
CVE ID: CVE-2023-28551 State: PUBLISHED Published: 2023-12-05T03:03:50.075Z Last Updated: 2024-08-02T13:43:23.278Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-119 Description: Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin
CVE ID: CVE-2023-28553 State: PUBLISHED Published: 2023-11-07T05:26:33.920Z Last Updated: 2024-09-04T18:53:58.506Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Information Disclosure in WLAN Host when processing WMI event command. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin
CVE ID: CVE-2023-28554 State: PUBLISHED Published: 2023-11-07T05:26:35.362Z Last Updated: 2024-08-02T13:43:23.243Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Information Disclosure in Qualcomm IPC while reading values from shared memory in VM. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin
CVE ID: CVE-2023-28555 State: PUBLISHED Published: 2023-08-08T09:15:02.599Z Last Updated: 2024-08-02T13:43:22.842Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS in Audio while remapping channel buffer in media codec decoding. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin
CVE ID: CVE-2023-28556 State: PUBLISHED Published: 2023-11-07T05:26:36.631Z Last Updated: 2024-08-02T13:43:22.844Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-285 Description: Cryptographic issue in HLOS during key management. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin
CVE ID: CVE-2023-28557 State: PUBLISHED Published: 2023-09-05T06:24:12.673Z Last Updated: 2024-08-02T13:43:23.051Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-129 Description: Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE ID: CVE-2023-28558 State: PUBLISHED Published: 2023-09-05T06:24:14.024Z Last Updated: 2024-08-02T13:43:23.150Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-129 Description: Memory corruption in WLAN handler while processing PhyID in Tx status handler. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE ID: CVE-2023-28559 State: PUBLISHED Published: 2023-09-05T06:24:15.784Z Last Updated: 2025-02-27T21:02:10.588Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE ID: CVE-2023-28560 State: PUBLISHED Published: 2023-09-05T06:24:17.160Z Last Updated: 2025-02-27T21:02:03.721Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE ID: CVE-2023-28561 State: PUBLISHED Published: 2023-08-08T09:15:03.741Z Last Updated: 2024-08-02T13:43:23.590Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption in QESL while processing payload from external ESL device to firmware. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin
CVE ID: CVE-2023-28562 State: PUBLISHED Published: 2023-09-05T06:24:18.576Z Last Updated: 2025-02-27T21:01:53.556Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption while handling payloads from remote ESL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE ID: CVE-2023-28563 State: PUBLISHED Published: 2023-11-07T05:26:37.887Z Last Updated: 2024-08-02T13:43:23.473Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Information disclosure in IOE Firmware while handling WMI command. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin
CVE ID: CVE-2023-28564 State: PUBLISHED Published: 2023-09-05T06:24:20.269Z Last Updated: 2025-02-27T21:01:43.864Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-823 Description: Memory corruption in WLAN HAL while passing command parameters through WMI interfaces. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE ID: CVE-2023-28565 State: PUBLISHED Published: 2023-09-05T06:24:21.806Z Last Updated: 2025-02-27T21:01:35.661Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-129 Description: Memory corruption in WLAN HAL while handling command streams through WMI interfaces. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE ID: CVE-2023-28566 State: PUBLISHED Published: 2023-11-07T05:26:38.950Z Last Updated: 2024-08-02T13:43:22.544Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Information disclosure in WLAN HAL while handling the WMI state info command. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin
CVE ID: CVE-2023-28567 State: PUBLISHED Published: 2023-09-05T06:24:23.598Z Last Updated: 2025-02-27T21:01:29.633Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-129 Description: Memory corruption in WLAN HAL while handling command through WMI interfaces. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE ID: CVE-2023-28568 State: PUBLISHED Published: 2023-11-07T05:26:40.000Z Last Updated: 2024-08-02T13:43:23.667Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Information disclosure in WLAN HAL when reception status handler is called. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin
CVE ID: CVE-2023-28569 State: PUBLISHED Published: 2023-11-07T05:26:42.279Z Last Updated: 2024-08-02T13:43:22.620Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Information disclosure in WLAN HAL while handling command through WMI interfaces. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin
CVE ID: CVE-2023-28570 State: PUBLISHED Published: 2023-11-07T05:26:43.590Z Last Updated: 2024-08-02T13:43:23.303Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption while processing audio effects. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin
CVE ID: CVE-2023-28571 State: PUBLISHED Published: 2023-10-03T05:00:37.642Z Last Updated: 2024-08-02T13:43:22.455Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
CVE ID: CVE-2023-28572 State: PUBLISHED Published: 2023-11-07T05:26:44.626Z Last Updated: 2024-08-02T13:43:22.628Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Memory corruption in WLAN HOST while processing the WLAN scan descriptor list. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin
CVE ID: CVE-2023-28573 State: PUBLISHED Published: 2023-09-05T06:24:25.110Z Last Updated: 2024-08-02T13:43:22.725Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-129 Description: Memory corruption in WLAN HAL while parsing WMI command parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE ID: CVE-2023-28574 State: PUBLISHED Published: 2023-11-07T05:26:45.653Z Last Updated: 2024-08-02T13:43:22.874Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-20 Description: Memory corruption in core services when Diag handler receives a command to configure event listeners. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin
CVE ID: CVE-2023-28575 State: PUBLISHED Published: 2023-08-08T09:15:04.824Z Last Updated: 2024-08-02T13:43:22.550Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-823 Description: The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handle is passed to it. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin
CVE ID: CVE-2023-28576 State: PUBLISHED Published: 2023-08-08T09:15:05.943Z Last Updated: 2024-08-02T13:43:22.705Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-367 Description: The buffer obtained from kernel APIs such as cam_mem_get_cpu_buf() may be readable/writable in userspace after kernel accesses it. In other words, user mode may race and modify the packet header (e.g. header.count), causing checks (e.g. size checks) in kernel code to be invalid. This may lead to out-of-bounds read/write issues. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www
read/write issues. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin
CVE ID: CVE-2023-28577 State: PUBLISHED Published: 2023-08-08T09:15:07.162Z Last Updated: 2024-08-02T13:43:23.051Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used. So when a function called cam_mem_get_cpu_buf to get the kernel va to use, another thread can call CAM_REQ_MGR_RELEASE_BUF to unmap the kernel va which cause UAF of the kernel address. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bul
s: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin
CVE ID: CVE-2023-28578 State: PUBLISHED Published: 2024-03-04T10:48:27.802Z Last Updated: 2024-08-29T18:23:28.510Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-20 Description: Memory corruption in Core Services while executing the command for removing a single event listener. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/march-2024-bulletin
CVE ID: CVE-2023-28579 State: PUBLISHED Published: 2023-12-05T03:03:51.357Z Last Updated: 2024-10-10T19:53:32.174Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory Corruption in WLAN Host while deserializing the input PMK bytes without checking the input PMK length. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin
CVE ID: CVE-2023-28580 State: PUBLISHED Published: 2023-12-05T03:03:52.368Z Last Updated: 2025-05-29T13:33:01.647Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin
CVE ID: CVE-2023-28581 State: PUBLISHED Published: 2023-09-05T06:24:26.366Z Last Updated: 2025-02-27T21:01:19.073Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-119 Description: Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE ID: CVE-2023-28582 State: PUBLISHED Published: 2024-03-04T10:48:29.470Z Last Updated: 2024-08-26T20:50:21.588Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/march-2024-bulletin
CVE ID: CVE-2023-28583 State: PUBLISHED Published: 2024-01-02T05:38:22.011Z Last Updated: 2025-06-17T18:38:06.834Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-415 Description: Memory corruption when IPv6 prefix timer object`s lifetime expires which are created while Netmgr daemon gets an IPv6 address. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE ID: CVE-2023-28584 State: PUBLISHED Published: 2023-09-05T06:24:27.838Z Last Updated: 2024-08-02T13:43:23.661Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-285 Description: Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement (CSA). Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin