Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
mitigates this by setting a scale limit of 1000 (by default) to the BigDecimal. This issue affects Apache Johnzon: through 1.2.20. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/qbg14djo95gfpk7o560lr8wcrzfyw43l
CVE ID: CVE-2023-33009 State: PUBLISHED Published: 2023-05-24T00:00:00.000Z Last Updated: 2025-10-21T23:05:47.636Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Zyxel Products: ATP series firmware, USG FLEX series firmware, USG FLEX 50(W) firmware, USG20(W)-VPN firmware, VPN series firmware, ZyWALL/USG series firmware Problem Types: CWE-120 Description: A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX series firmware versions 4.60 through 5.36 Patch 1, USG FLEX 50(W) firmware versions 4.60 through 5.36 Patch 1, USG20(W)-VPN firmware versions 4.60 through 5.36 Patch 1, V
USG FLEX 50(W) firmware versions 4.60 through 5.36 Patch 1, USG20(W)-VPN firmware versions 4.60 through 5.36 Patch 1, VPN series firmware versions 4.60 through 5.36 Patch 1, ZyWALL/USG series firmware versions 4.60 through 4.73 Patch 1, could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and even a remote code execution on an affected device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-buffer-overflow-vulnerabilities-of-firewalls
CVE ID: CVE-2023-33010 State: PUBLISHED Published: 2023-05-24T00:00:00.000Z Last Updated: 2025-10-21T23:05:47.497Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Zyxel Products: ATP series firmware, USG FLEX series firmware, USG FLEX 50(W) firmware, USG20(W)-VPN firmware, VPN series firmware, ZyWALL/USG series firmware Problem Types: CWE-120 Description: A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware versions 4.50 through 5.36 Patch 1, USG FLEX 50(W) firmware versions 4.25 through 5.36 Patch 1, USG20(W)-VPN firmware versions 4.25 through 5.36 Patch 1,
, USG FLEX 50(W) firmware versions 4.25 through 5.36 Patch 1, USG20(W)-VPN firmware versions 4.25 through 5.36 Patch 1, VPN series firmware versions 4.30 through 5.36 Patch 1, ZyWALL/USG series firmware versions 4.25 through 4.73 Patch 1, could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and even a remote code execution on an affected device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-buffer-overflow-vulnerabilities-of-firewalls
CVE ID: CVE-2023-33011 State: PUBLISHED Published: 2023-07-17T17:15:45.876Z Last Updated: 2024-11-07T19:08:01.595Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Zyxel Products: ATP series firmware, USG FLEX series firmware, USG FLEX 50(W) series firmware, USG20(W)-VPN series firmware, VPN series firmware Problem Types: CWE-134 Description: A format string vulnerability in the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through 5.36 Patch 2, USG FLEX 50(W) series firmware versions 5.10 through 5.36 Patch 2, USG20(W)-VPN series firmware versions 5.10 through 5.36 Patch 2, and VPN series firmware versions
through 5.36 Patch 2, USG20(W)-VPN series firmware versions 5.10 through 5.36 Patch 2, and VPN series firmware versions 5.00 through 5.36 Patch 2, could allow an unauthenticated, LAN-based attacker to execute some OS commands by using a crafted PPPoE configuration on an affected device when the cloud management mode is enabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-wlan-controllers
CVE ID: CVE-2023-33012 State: PUBLISHED Published: 2023-07-17T17:23:26.370Z Last Updated: 2025-03-05T18:48:53.862Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Zyxel Products: ATP series firmware, USG FLEX series firmware, USG FLEX 50(W) series firmware, USG20(W)-VPN series firmware, VPN series firmware Problem Types: CWE-78 Description: A command injection vulnerability in the configuration parser of the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through 5.36 Patch 2, USG FLEX 50(W) series firmware versions 5.10 through 5.36 Patch 2, USG20(W)-VPN series firmware versions 5.10 through 5.36 Patch 2, a
) series firmware versions 5.10 through 5.36 Patch 2, USG20(W)-VPN series firmware versions 5.10 through 5.36 Patch 2, and VPN series firmware versions 5.00 through 5.36 Patch 2, could allow an unauthenticated, LAN-based attacker to execute some OS commands by using a crafted GRE configuration when the cloud management mode is enabled. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-wlan-controllers
CVE ID: CVE-2023-33013 State: PUBLISHED Published: 2023-08-14T16:16:32.142Z Last Updated: 2024-10-09T16:12:00.346Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Zyxel Products: NBG6604 firmware Problem Types: CWE-78 Description: A post-authentication command injection vulnerability in the NTP feature of Zyxel NBG6604 firmware version V1.01(ABIR.1)C0 could allow an authenticated attacker to execute some OS commands remotely by sending a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-comman
es: - https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-command-injection-in-ntp-feature-of-nbg6604-home-router
CVE ID: CVE-2023-33014 State: PUBLISHED Published: 2024-01-02T05:38:23.183Z Last Updated: 2025-06-03T14:46:32.662Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-20 Description: Information disclosure in Core services while processing a Diag command. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE ID: CVE-2023-33015 State: PUBLISHED Published: 2023-09-05T06:24:29.035Z Last Updated: 2024-08-02T15:32:46.747Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE ID: CVE-2023-33016 State: PUBLISHED Published: 2023-09-05T06:24:30.323Z Last Updated: 2024-08-02T15:32:46.662Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS in WLAN firmware while parsing MLO (multi-link operation). Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE ID: CVE-2023-33017 State: PUBLISHED Published: 2023-12-05T03:03:59.402Z Last Updated: 2024-08-02T15:32:46.510Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption in Boot while running a ListVars test in UEFI Menu during boot. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin
CVE ID: CVE-2023-33018 State: PUBLISHED Published: 2023-12-05T03:04:00.939Z Last Updated: 2024-10-10T19:47:58.281Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-680 Description: Memory corruption while using the UIM diag command to get the operators name. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin
CVE ID: CVE-2023-33019 State: PUBLISHED Published: 2023-09-05T06:24:31.530Z Last Updated: 2024-08-02T15:32:46.604Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-285 Description: Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel in CSA IE. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE ID: CVE-2023-33020 State: PUBLISHED Published: 2023-09-05T06:24:32.701Z Last Updated: 2024-08-02T15:32:46.660Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-285 Description: Transient DOS in WLAN Host when an invalid channel (like channel out of range) is received in STA during CSA IE. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE ID: CVE-2023-33021 State: PUBLISHED Published: 2023-09-05T06:24:34.185Z Last Updated: 2024-08-02T15:32:46.533Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption in Graphics while processing user packets for command submission. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE ID: CVE-2023-33022 State: PUBLISHED Published: 2023-12-05T03:04:02.255Z Last Updated: 2025-05-29T13:32:24.041Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-680 Description: Memory corruption in HLOS while invoking IOCTL calls from user-space. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin
CVE ID: CVE-2023-33023 State: PUBLISHED Published: 2024-04-01T15:05:51.287Z Last Updated: 2024-08-02T15:32:46.521Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption while processing finish_sign command to pass a rsp buffer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2024-bulletin.html
CVE ID: CVE-2023-33024 State: PUBLISHED Published: 2023-12-05T03:04:03.310Z Last Updated: 2024-08-02T15:32:46.515Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption while sending SMS from AP firmware. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin
CVE ID: CVE-2023-33025 State: PUBLISHED Published: 2024-01-02T05:38:25.107Z Last Updated: 2025-04-17T18:51:19.706Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE ID: CVE-2023-33026 State: PUBLISHED Published: 2023-10-03T05:00:38.775Z Last Updated: 2024-08-02T15:32:46.632Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS in WLAN Firmware while parsing a NAN management frame. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
CVE ID: CVE-2023-33027 State: PUBLISHED Published: 2023-10-03T05:00:40.127Z Last Updated: 2024-08-02T15:32:46.565Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS in WLAN Firmware while parsing rsn ies. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
CVE ID: CVE-2023-33028 State: PUBLISHED Published: 2023-10-03T05:00:41.521Z Last Updated: 2025-02-27T20:47:35.999Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-121 Description: Memory corruption in WLAN Firmware while doing a memory copy of pmk cache. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
CVE ID: CVE-2023-33029 State: PUBLISHED Published: 2023-10-03T05:00:42.655Z Last Updated: 2025-02-27T20:47:30.424Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption in DSP Service during a remote call from HLOS to DSP. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
CVE ID: CVE-2023-33030 State: PUBLISHED Published: 2024-01-02T05:38:26.512Z Last Updated: 2025-06-03T14:46:27.869Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption in HLOS while running playready use-case. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE ID: CVE-2023-33031 State: PUBLISHED Published: 2023-11-07T05:26:46.671Z Last Updated: 2025-02-05T18:06:35.445Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin
CVE ID: CVE-2023-33032 State: PUBLISHED Published: 2024-01-02T05:38:28.022Z Last Updated: 2025-06-16T18:30:24.014Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-190 Description: Memory corruption in TZ Secure OS while requesting a memory allocation from TA region. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE ID: CVE-2023-33033 State: PUBLISHED Published: 2024-01-02T05:38:29.493Z Last Updated: 2025-05-21T14:06:28.914Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-823 Description: Memory corruption in Audio during playback with speaker protection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE ID: CVE-2023-33034 State: PUBLISHED Published: 2023-10-03T05:00:43.765Z Last Updated: 2025-02-27T20:47:20.584Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-195 Description: Memory corruption while parsing the ADSP response command. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
CVE ID: CVE-2023-33035 State: PUBLISHED Published: 2023-10-03T05:00:44.906Z Last Updated: 2025-02-27T20:47:10.634Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption while invoking callback function of AFE from ADSP. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
CVE ID: CVE-2023-33036 State: PUBLISHED Published: 2024-01-02T05:38:30.949Z Last Updated: 2024-09-06T17:55:28.533Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-476 Description: Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE ID: CVE-2023-33037 State: PUBLISHED Published: 2024-01-02T05:38:32.164Z Last Updated: 2025-06-17T20:19:03.574Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-310 Description: Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE ID: CVE-2023-33038 State: PUBLISHED Published: 2024-01-02T05:38:33.322Z Last Updated: 2024-11-14T19:30:38.544Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-190 Description: Memory corruption while receiving a message in Bus Socket Transport Server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE ID: CVE-2023-33039 State: PUBLISHED Published: 2023-10-03T05:00:46.094Z Last Updated: 2025-02-27T20:47:01.752Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption in Automotive Display while destroying the image handle created using connected display driver. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
CVE ID: CVE-2023-33040 State: PUBLISHED Published: 2024-01-02T05:38:34.624Z Last Updated: 2025-06-03T14:46:23.285Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS in Data Modem during DTLS handshake. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE ID: CVE-2023-33041 State: PUBLISHED Published: 2023-12-05T03:04:04.387Z Last Updated: 2024-08-02T15:32:46.553Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-617 Description: Under certain scenarios the WLAN Firmware will reach an assertion due to state confusion while looking up peer ids. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin
CVE ID: CVE-2023-33042 State: PUBLISHED Published: 2023-12-05T03:04:05.448Z Last Updated: 2024-08-02T15:32:46.625Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-20 Description: Transient DOS in Modem after RRC Setup message is received. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin
CVE ID: CVE-2023-33043 State: PUBLISHED Published: 2023-12-05T03:04:06.499Z Last Updated: 2024-08-02T15:32:46.586Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-617 Description: Transient DOS in Modem when a Beam switch request is made with a non-configured BWP. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin
CVE ID: CVE-2023-33044 State: PUBLISHED Published: 2023-12-05T03:04:07.572Z Last Updated: 2024-08-02T15:32:46.630Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-617 Description: Transient DOS in Data modem while handling TLB control messages from the Network. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin
CVE ID: CVE-2023-33045 State: PUBLISHED Published: 2023-11-07T05:26:47.720Z Last Updated: 2024-08-02T15:32:46.585Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin
CVE ID: CVE-2023-33046 State: PUBLISHED Published: 2024-02-06T05:46:57.784Z Last Updated: 2025-06-17T21:29:25.937Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-367 Description: Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin
CVE ID: CVE-2023-33047 State: PUBLISHED Published: 2023-11-07T05:26:48.751Z Last Updated: 2024-08-02T15:32:46.561Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS in WLAN Firmware while parsing no-inherit IES. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin
CVE ID: CVE-2023-33048 State: PUBLISHED Published: 2023-11-07T05:26:49.815Z Last Updated: 2024-08-02T15:32:46.635Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS in WLAN Firmware while parsing t2lm buffers. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin