deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-31104
Published: 2024-03-31
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GetResponse GetResponse for WordPress allows Stored XSS.This issue affects GetResponse for WordPress: from n/a through 5.5.33.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/getresponse-integration/wordpress-getresponse-for-wordpress-plugin-5-5-33-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/getresponse-integration/wordpress-getresponse-for-wordpress-plugin-5-5-33-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2014-125110
Published: 2024-04-01
Description: A vulnerability has been found in wp-file-upload Plugin up to 2.4.3 on WordPress and classified as problematic. Affected by this vulnerability is the function wfu_ajax_action_callback of the file lib/wfu_ajaxactions.php. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 2.4.4 is able to address this issue. The identifier of the patch is c846327df030a0a97da036a2f07c769ab9284ddb. It is recommended to upgrade the affected component. The identifier VDB-258781 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/wp-plugins/wp-file-upload/commit/c846327df030a0a97da036a2f07c769ab9284ddb; https://github.com/wp-plugins/wp-file-upload/releases/tag/2.4.4; https://vuldb.com/?ctiid.258781
CVE: CVE-2023-51803
Published: 2024-04-01
Description: LinuxServer.io Heimdall before 2.5.7 does not prevent use of icons that have non-image data such as the "<?php ?>" substring.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-674
References: https://github.com/linuxserver/Heimdall/pull/1167; https://github.com/linuxserver/Heimdall/pull/1173; https://github.com/linuxserver/Heimdall/releases/tag/v2.5.7
CVE: CVE-2024-27609
Published: 2024-04-01
Description: Bonita before 2023.2-u2 allows stored XSS via a UI screen in the administration panel.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://documentation.bonitasoft.com/bonita/latest/release-notes#_fixes_in_bonita_runtime_including_bonita_applications_2; https://documentation.bonitasoft.com/bonita/latest/release-notes#_fixes_in_bonita_runtime_including_bonita_applications_2
CVE: CVE-2024-28895
Published: 2024-04-01
Description: 'Yahoo! JAPAN' App for Android v2.3.1 to v3.161.1 and 'Yahoo! JAPAN' App for iOS v3.2.2 to v4.109.0 contain a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the WebView of 'Yahoo! JAPAN' App via other app installed on the user's device.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN23528780/; https://jvn.jp/en/jp/JVN23528780/
CVE: CVE-2024-31033
Published: 2024-04-01
Description: JJWT (aka Java JWT) through 0.12.5 ignores certain characters and thus a user might falsely conclude that they have a strong key. The impacted code is the setSigningKey() method within the DefaultJwtParser class and the signWith() method within the DefaultJwtBuilder class. NOTE: the vendor disputes this because the "ignores" behavior cannot occur (in any version) unless there is a user error in how JJWT is used, and because the version that was actually tested must have been more than six years out of date.
CVSS Score: 6.8 (MEDIUM)
References: https://github.com/[PII_REDACTED]/JJWT_BUG; https://github.com/jwtk/jjwt; https://github.com/jwtk/jjwt/issues/930#issuecomment[PII_REDACTED]
CVE: CVE-2024-20039
Published: 2024-04-01
Description: In modem protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01240012; Issue ID: MSV-1215.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/April-2024; https://corp.mediatek.com/product-security-bulletin/April-2024
CVE: CVE-2024-20040
Published: 2024-04-01
Description: In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08360153 (for MT6XXX chipsets) / WCNCR00363530 (for MT79XX chipsets); Issue ID: MSV-979.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/April-2024; https://corp.mediatek.com/product-security-bulletin/April-2024
CVE: CVE-2024-20041
Published: 2024-04-01
Description: In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541746; Issue ID: ALPS08541746.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/April-2024; https://corp.mediatek.com/product-security-bulletin/April-2024
CVE: CVE-2024-20042
Published: 2024-04-01
Description: In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541780; Issue ID: ALPS08541780.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/April-2024; https://corp.mediatek.com/product-security-bulletin/April-2024
CVE: CVE-2024-20043
Published: 2024-04-01
Description: In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541781; Issue ID: ALPS08541781.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/April-2024; https://corp.mediatek.com/product-security-bulletin/April-2024
CVE: CVE-2024-20044
Published: 2024-04-01
Description: In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541784; Issue ID: ALPS08541784.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/April-2024; https://corp.mediatek.com/product-security-bulletin/April-2024
CVE: CVE-2024-20045
Published: 2024-04-01
Description: In audio, there is a possible out of bounds read due to an incorrect calculation of buffer size. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08024748; Issue ID: ALPS08029526.
CVSS Score: 2.3 (LOW)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/April-2024; https://corp.mediatek.com/product-security-bulletin/April-2024
CVE: CVE-2024-20046
Published: 2024-04-01
Description: In battery, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08485622; Issue ID: ALPS08485622.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-190
References: https://corp.mediatek.com/product-security-bulletin/April-2024; https://corp.mediatek.com/product-security-bulletin/April-2024
CVE: CVE-2024-20047
Published: 2024-04-01
Description: In battery, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08587865; Issue ID: ALPS08486807.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-190
References: https://corp.mediatek.com/product-security-bulletin/April-2024; https://corp.mediatek.com/product-security-bulletin/April-2024
CVE: CVE-2024-20048
Published: 2024-04-01
Description: In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541769; Issue ID: ALPS08541769.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-248
References: https://corp.mediatek.com/product-security-bulletin/April-2024; https://corp.mediatek.com/product-security-bulletin/April-2024
CVE: CVE-2024-20049
Published: 2024-04-01
Description: In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541765; Issue ID: ALPS08541765.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-248
References: https://corp.mediatek.com/product-security-bulletin/April-2024; https://corp.mediatek.com/product-security-bulletin/April-2024
CVE: CVE-2024-20050
Published: 2024-04-01
Description: In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541757; Issue ID: ALPS08541757.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-922
References: https://corp.mediatek.com/product-security-bulletin/April-2024; https://corp.mediatek.com/product-security-bulletin/April-2024
CVE: CVE-2024-20051
Published: 2024-04-01
Description: In flashc, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541757; Issue ID: ALPS08541758.
CVSS Score: 2.3 (LOW)
References: https://corp.mediatek.com/product-security-bulletin/April-2024; https://corp.mediatek.com/product-security-bulletin/April-2024
CVE: CVE-2024-20052
Published: 2024-04-01
Description: In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541757; Issue ID: ALPS08541761.
CVSS Score: 4.4 (MEDIUM)
References: https://corp.mediatek.com/product-security-bulletin/April-2024; https://corp.mediatek.com/product-security-bulletin/April-2024
CVE: CVE-2024-20053
Published: 2024-04-01
Description: In flashc, there is a possible out of bounds write due to an uncaught exception. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541757; Issue ID: ALPS08541764.
CVSS Score: 8.4 (HIGH)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/April-2024; https://corp.mediatek.com/product-security-bulletin/April-2024
CVE: CVE-2024-20054
Published: 2024-04-01
Description: In gnss, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08580200; Issue ID: ALPS08580200.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/April-2024; https://corp.mediatek.com/product-security-bulletin/April-2024
CVE: CVE-2024-20055
Published: 2024-04-01
Description: In imgsys, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation Patch ID: ALPS08518692; Issue ID: MSV-1012.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/April-2024; https://corp.mediatek.com/product-security-bulletin/April-2024
CVE: CVE-2024-1526
Published: 2024-04-01
Description: The Hubbub Lite  WordPress plugin before 1.33.1 does not ensure that user have access to password protected post before displaying its content in a meta tag.
CVSS Score: 5.3 (MEDIUM)
References: https://wpscan.com/vulnerability/1664697e-0ea3-4d09-b2fd-153a104ec255/; https://wpscan.com/vulnerability/1664697e-0ea3-4d09-b2fd-153a104ec255/
CVE: CVE-2024-2262
Published: 2024-04-01
Description: Themify  WordPress plugin before 1.4.4 does not have CSRF check in its bulk action, which could allow attackers to make logged in users delete arbitrary filters via CSRF attack, granted they know the related filter slugs
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/30544377-b90d-4762-b38a-ec89bda0dfdc/; https://wpscan.com/vulnerability/30544377-b90d-4762-b38a-ec89bda0dfdc/
CVE: CVE-2024-2263
Published: 2024-04-01
Description: Themify  WordPress plugin before 1.4.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/ec092ed9-eb3e-40a7-a878-ab854104e290/; https://wpscan.com/vulnerability/ec092ed9-eb3e-40a7-a878-ab854104e290/
CVE: CVE-2024-2278
Published: 2024-04-01
Description: Themify  WordPress plugin before 1.4.4 does not sanitise and escape some of its Filters settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/2cbabde8-1e3e-4205-8a5c-b889447236a0/; https://wpscan.com/vulnerability/2cbabde8-1e3e-4205-8a5c-b889447236a0/
CVE: CVE-2016-15038
Published: 2024-04-01
Description: A vulnerability, which was classified as critical, was found in NUUO NVRmini 2 up to 3.0.8. Affected is an unknown function of the file /deletefile.php. The manipulation of the argument filename leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-258780.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://vuldb.com/?ctiid.258780; https://vuldb.com/?id.258780; https://www.exploit-db.com/exploits/40214
CVE: CVE-2024-25080
Published: 2024-04-01
Description: WebMail in Axigen 10.x before 10.3.3.62 allows XSS via the image attachment viewer.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://www.axigen.com/knowledgebase/Axigen-WebMail-XSS-Vulnerability-CVE-2024-25080-_401.html; https://www.axigen.com/mail-server/axigen-older-features/; https://www.axigen.com/knowledgebase/Axigen-WebMail-XSS-Vulnerability-CVE-2024-25080-_401.html
CVE: CVE-2024-26653
Published: 2024-04-01
Description: In the Linux kernel, the following vulnerability has been resolved:

usb: misc: ljca: Fix double free in error handling path

When auxiliary_device_add() returns error and then calls
auxiliary_device_uninit(), callback function ljca_auxdev_release
calls kfree(auxdev->dev.platform_data) to free the parameter data
of the function ljca_new_client_device. The callers of
ljca_new_client_device shouldn't call kfree() again
in the error handling path to free the platform data.

Fix this by cleaning up the redundant kfree() in all callers and
adding kfree() the passed in platform_data on errors which happen
before auxiliary_device_init() succeeds .
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: https://git.kernel.org/stable/c/420babea4f1881a7c4ea22a8e218b8c6895d3f21; https://git.kernel.org/stable/c/7c[PII_REDACTED]a5366bc8e39cd5abff154b35fb80; https://git.kernel.org/stable/c/8a9f653cc852677003c23ee8075e3ed8fb4743c9
CVE: CVE-2024-26654
Published: 2024-04-01
Description: In the Linux kernel, the following vulnerability has been resolved:

ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs

The dreamcastcard->timer could schedule the spu_dma_work and the
spu_dma_work could also arm the dreamcastcard->timer.

When the snd_pcm_substream is closing, the aica_channel will be
deallocated. But it could still be dereferenced in the worker
thread. The reason is that del_timer() will return directly
regardless of whether the timer handler is running or not and
the worker could be rescheduled in the timer handler. As a result,
the UAF bug will happen. The racy situation is shown below:

      (Thread 1)                 |      (Thread 2)
snd_aicapcm_pcm_close()          |
 ...                             |  run_spu_dma() //worker
                                 |    mod_timer()
  flush_work()                   |
  del_timer()                    |  aica_period_elapsed() //timer
  kfree(dreamcastcard->channel)  |    schedule_work()
                                 |  run_spu_dma() //worker
  ...                            |    dreamcastcard->channel-> //USE

In order to mitigate this bug and other possible corner cases,
call mod_timer() conditionally in run_spu_dma(), then implement
PCM sync_stop op to cancel both the timer and worker. The sync_stop
op will be called from PCM core appropriately when needed.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: https://git.kernel.org/stable/c/051e0840ffa8ab25554d6b14b62c9ab9e4901457; https://git.kernel.org/stable/c/3c907bf56905de7d27b329afaf59c2fb35d17b04; https://git.kernel.org/stable/c/4206ad65a0ee76920041a755bd3c17c6ba59bba2
CVE: CVE-2024-3130
Published: 2024-04-01
Description: Hard-coded Credentials in CoolKit eWeLlink app are before 5.4.x on Android and IOS allows local attacker to unauthorized access to sensitive data via Decryption algorithm and key obtained after decompiling app


CVSS Score: 5.7 (MEDIUM)
CWE: CWE-798
References: https://ewelink.cc/security-advisories-and-notices/; https://ewelink.cc/security-advisories-and-notices/
CVE: CVE-2023-6154
Published: 2024-04-01
Description: A configuration setting issue in seccenter.exe as used in Bitdefender Total Security, Bitdefender Internet Security, Bitdefender Antivirus Plus, Bitdefender Antivirus Free allows an attacker to change the product's expected behavior and potentially load a third-party library upon execution. This issue affects Total Security: 27.0.25.114; Internet Security: 27.0.25.114; Antivirus Plus: 27.0.25.114; Antivirus Free: 27.0.25.114.
CVSS Score: 7.8 (HIGH)
CWE: CWE-15, CWE-610
References: https://bitdefender.com/support/security-advisories/local-privilege-escalation-in-bitdefender-total-security-va-11168/; https://bitdefender.com/support/security-advisories/local-privilege-escalation-in-bitdefender-total-security-va-11168/
CVE: CVE-2022-4966
Published: 2024-04-01
Description: A vulnerability was found in sequentech admin-console up to 6.1.7 and classified as problematic. Affected by this issue is some unknown functionality of the component Election Description Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. Upgrading to version 7.0.0-beta.1 is able to address this issue. The patch is identified as 0043a6b1e6e0f5abc9557e73f9ffc524fc5d609d. It is recommended to upgrade the affected component. VDB-258782 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/sequentech/admin-console/commit/0043a6b1e6e0f5abc9557e73f9ffc524fc5d609d; https://github.com/sequentech/admin-console/pull/292; https://github.com/sequentech/admin-console/pull/293
CVE: CVE-2024-30868
Published: 2024-04-01
Description: netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/add_getlogin.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/hundanchen69/cve/blob/main/NS-ASG-sql-add_getlogin.md; https://github.com/hundanchen69/cve/blob/main/NS-ASG-sql-add_getlogin.md
CVE: CVE-2024-30870
Published: 2024-04-01
Description: netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/address_interpret.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/hundanchen69/cve/blob/main/NS-ASG-sql-address_interpret.md; https://github.com/hundanchen69/cve/blob/main/NS-ASG-sql-address_interpret.md
CVE: CVE-2024-30871
Published: 2024-04-01
Description: netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/applyhardware.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/hundanchen69/cve/blob/main/NS-ASG-sql-applyhardware.md; https://github.com/hundanchen69/cve/blob/main/NS-ASG-sql-applyhardware.md
CVE: CVE-2024-30872
Published: 2024-04-01
Description: netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /include/authrp.php.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-89
References: https://github.com/hundanchen69/cve/blob/main/NS-ASG-sql-authrp.md; https://github.com/hundanchen69/cve/blob/main/NS-ASG-sql-authrp.md
CVE: CVE-2024-3124
Published: 2024-04-01
Description: A vulnerability classified as problematic has been found in fridgecow smartalarm 1.8.1 on Android. This affects an unknown part of the file androidmanifest.xml of the component Backup File Handler. The manipulation leads to exposure of backup file to an unauthorized control sphere. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-258867.
CVSS Score: 2.4 (LOW)
CWE: CWE-530
References: https://github.com/ctflearner/Android_Findings/blob/main/Smartalarm/Backup.md; https://vuldb.com/?ctiid.258867; https://vuldb.com/?id.258867
CVE: CVE-2024-31099
Published: 2024-04-01
Description: Missing Authorization vulnerability in Averta Shortcodes and extra features for Phlox theme auxin-elements.This issue affects Shortcodes and extra features for Phlox theme: from n/a through 2.15.7.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/auxin-elements/wordpress-phlox-core-elements-plugin-2-15-5-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/auxin-elements/wordpress-phlox-core-elements-plugin-2-15-5-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2024-3125
Published: 2024-04-01
Description: A vulnerability classified as problematic was found in Zebra ZTC GK420d 1.0. This vulnerability affects unknown code of the file /settings of the component Alert Setup Page. The manipulation of the argument Address leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-258868. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 2.4 (LOW)
CWE: CWE-79
References: https://github.com/strik3r0x1/Vulns/blob/main/ZTC_GK420d-SXSS.md; https://vuldb.com/?ctiid.258868; https://vuldb.com/?id.258868
CVE: CVE-2023-28547
Published: 2024-04-01
Description: Memory corruption in SPS Application while requesting for public key in sorter TA.
CVSS Score: 8.4 (HIGH)
CWE: CWE-120, CWE-787
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2024-bulletin.html; https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2024-bulletin.html
CVE: CVE-2023-33023
Published: 2024-04-01
Description: Memory corruption while processing finish_sign command to pass a rsp buffer.
CVSS Score: 8.4 (HIGH)
CWE: CWE-120, CWE-120
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2024-bulletin.html; https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2024-bulletin.html
CVE: CVE-2023-33099
Published: 2024-04-01
Description: Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2024-bulletin.html; https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2024-bulletin.html