deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-0183
Published: 2024-01-01
Description: A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been classified as problematic. This affects an unknown part of the file /admin/students.php of the component NIA Office. The manipulation leads to basic cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249441 was assigned to this vulnerability.
CVSS Score: 2.4 (LOW)
CWE: CWE-80
References: https://mega.nz/file/SB8ylCxQ#vSaXJwbNjeG-KXatgkxE8XI6Cmnv-A_Sg2IjvoJZs0E; https://vuldb.com/?ctiid.249441; https://vuldb.com/?id.249441
CVE: CVE-2024-0184
Published: 2024-01-02
Description: A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/edit_teacher.php of the component Add Enginer. The manipulation of the argument Firstname/Lastname leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-249442 is the identifier assigned to this vulnerability.
CVSS Score: 2.4 (LOW)
CWE: CWE-79
References: https://mega.nz/file/eN8yEKSA#YCJNH1v4BKOG2xyxOZYPIuO3Oz7biv2ugfarAI5n_3k; https://vuldb.com/?ctiid.249442; https://vuldb.com/?id.249442
CVE: CVE-2024-0185
Published: 2024-01-02
Description: A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file dasboard_teacher.php of the component Avatar Handler. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249443.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-434, CWE-434
References: https://mega.nz/file/PBd13AoR#G3fYWB82wGCa7sD22JP3_twtbw3B0qSJ-4eMMrYR5cE; https://vuldb.com/?ctiid.249443; https://vuldb.com/?id.249443
CVE: CVE-2024-0186
Published: 2024-01-02
Description: A vulnerability classified as problematic has been found in HuiRan Host Reseller System up to 2.0.0. Affected is an unknown function of the file /user/index/findpass?do=4 of the component HTTP POST Request Handler. The manipulation leads to weak password recovery. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249444.
CVSS Score: 3.7 (LOW)
CWE: CWE-640
References: https://note.zhaoj.in/share/WwPWWizD2Spk; https://vuldb.com/?ctiid.249444; https://vuldb.com/?id.249444
CVE: CVE-2023-32831
Published: 2024-01-02
Description: In wlan driver, there is a possible PIN crack due to use of insufficiently random values. This could lead to local information disclosure with no execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00325055; Issue ID: MSV-868.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-330, CWE-330
References: https://corp.mediatek.com/product-security-bulletin/January-2024; https://corp.mediatek.com/product-security-bulletin/January-2024
CVE: CVE-2023-32872
Published: 2024-01-02
Description: In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308607; Issue ID: ALPS08308607.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/January-2024; https://corp.mediatek.com/product-security-bulletin/January-2024
CVE: CVE-2023-32874
Published: 2024-01-02
Description: In Modem IMS Stack, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01161803; Issue ID: MOLY01161803 (MSV-893).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/January-2024; https://corp.mediatek.com/product-security-bulletin/January-2024
CVE: CVE-2023-32875
Published: 2024-01-02
Description: In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308607; Issue ID: ALPS08304217.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://corp.mediatek.com/product-security-bulletin/January-2024; https://corp.mediatek.com/product-security-bulletin/January-2024
CVE: CVE-2023-32876
Published: 2024-01-02
Description: In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308612; Issue ID: ALPS08308612.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://corp.mediatek.com/product-security-bulletin/January-2024; https://corp.mediatek.com/product-security-bulletin/January-2024
CVE: CVE-2023-32877
Published: 2024-01-02
Description: In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08308070.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/January-2024; https://corp.mediatek.com/product-security-bulletin/January-2024
CVE: CVE-2023-32878
Published: 2024-01-02
Description: In battery, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08307992.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://corp.mediatek.com/product-security-bulletin/January-2024; https://corp.mediatek.com/product-security-bulletin/January-2024
CVE: CVE-2023-32879
Published: 2024-01-02
Description: In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08308064.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/January-2024; https://corp.mediatek.com/product-security-bulletin/January-2024
CVE: CVE-2023-32880
Published: 2024-01-02
Description: In battery, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08308076.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://corp.mediatek.com/product-security-bulletin/January-2024; https://corp.mediatek.com/product-security-bulletin/January-2024
CVE: CVE-2023-32881
Published: 2024-01-02
Description: In battery, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08308080.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://corp.mediatek.com/product-security-bulletin/January-2024; https://corp.mediatek.com/product-security-bulletin/January-2024
CVE: CVE-2023-32882
Published: 2024-01-02
Description: In battery, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08308616.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/January-2024; https://corp.mediatek.com/product-security-bulletin/January-2024
CVE: CVE-2023-32883
Published: 2024-01-02
Description: In Engineer Mode, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08282249; Issue ID: ALPS08282249.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/January-2024; https://corp.mediatek.com/product-security-bulletin/January-2024
CVE: CVE-2023-32884
Published: 2024-01-02
Description: In netdagent, there is a possible information disclosure due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07944011; Issue ID: ALPS07944011.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-119, CWE-119
References: https://corp.mediatek.com/product-security-bulletin/January-2024; https://corp.mediatek.com/product-security-bulletin/January-2024
CVE: CVE-2023-32885
Published: 2024-01-02
Description: In display drm, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07780685; Issue ID: ALPS07780685.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-119, CWE-119
References: https://corp.mediatek.com/product-security-bulletin/January-2024; https://corp.mediatek.com/product-security-bulletin/January-2024
CVE: CVE-2023-32886
Published: 2024-01-02
Description: In Modem IMS SMS UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00730807; Issue ID: MOLY00730807.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/January-2024; https://corp.mediatek.com/product-security-bulletin/January-2024
CVE: CVE-2023-32887
Published: 2024-01-02
Description: In Modem IMS Stack, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01161837; Issue ID: MOLY01161837 (MSV-892).
CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-787, CWE-119, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/January-2024; https://corp.mediatek.com/product-security-bulletin/January-2024
CVE: CVE-2023-32888
Published: 2024-01-02
Description: In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01161830; Issue ID: MOLY01161830 (MSV-894).
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/January-2024; https://corp.mediatek.com/product-security-bulletin/January-2024
CVE: CVE-2023-32889
Published: 2024-01-02
Description: In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01161825; Issue ID: MOLY01161825 (MSV-895).
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/January-2024; https://corp.mediatek.com/product-security-bulletin/January-2024
CVE: CVE-2023-32890
Published: 2024-01-02
Description: In modem EMM, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01183647; Issue ID: MOLY01183647 (MSV-963).
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://corp.mediatek.com/product-security-bulletin/April-2024; https://corp.mediatek.com/product-security-bulletin/April-2024
CVE: CVE-2023-32891
Published: 2024-01-02
Description: In bluetooth service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07933038; Issue ID: MSV-559.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/January-2024; https://corp.mediatek.com/product-security-bulletin/January-2024
CVE: CVE-2023-26157
Published: 2024-01-02
Description: Versions of the package libredwg before 0.12.5.6384 are vulnerable to Denial of Service (DoS) due to an out-of-bounds read involving section->num_pages in decode_r2007.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400, CWE-125
References: https://github.com/LibreDWG/libredwg/commit/c8cf03ce4c2315b146caf582ea061c0460193bcc; https://github.com/LibreDWG/libredwg/issues/850; https://security.snyk.io/vuln/SNYK-UNMANAGED-LIBREDWG-6070730
CVE: CVE-2023-26159
Published: 2024-01-02
Description: Versions of the package follow-redirects before 1.15.4 are vulnerable to Improper Input Validation due to the improper handling of URLs by the url.parse() function. When new URL() throws an error, it can be manipulated to misinterpret the hostname. An attacker could exploit this weakness to redirect traffic to a malicious site, potentially leading to information disclosure, phishing attacks, or other security breaches.
CVSS Score: 7.3 (HIGH)
CWE: CWE-20, CWE-601, CWE-601
References: https://github.com/follow-redirects/follow-redirects/issues/235; https://github.com/follow-redirects/follow-redirects/pull/236; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZZ425BFKNBQ6AK7I5SAM56TWON5OF2XM/
CVE: CVE-2023-28583
Published: 2024-01-02
Description: Memory corruption when IPv6 prefix timer object`s lifetime expires which are created while Netmgr daemon gets an IPv6 address.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-415, CWE-415
References: https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE: CVE-2023-33014
Published: 2024-01-02
Description: Information disclosure in Core services while processing a Diag command.
CVSS Score: 7.6 (HIGH)
CWE: CWE-20, CWE-20
References: https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE: CVE-2023-33025
Published: 2024-01-02
Description: Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE: CVE-2023-33030
Published: 2024-01-02
Description: Memory corruption in HLOS while running playready use-case.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-120, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE: CVE-2023-33032
Published: 2024-01-02
Description: Memory corruption in TZ Secure OS while requesting a memory allocation from TA region.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-190, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE: CVE-2023-33033
Published: 2024-01-02
Description: Memory corruption in Audio during playback with speaker protection.
CVSS Score: 8.4 (HIGH)
CWE: CWE-823, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE: CVE-2023-33036
Published: 2024-01-02
Description: Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call.
CVSS Score: 7.1 (HIGH)
CWE: CWE-476, CWE-476
References: https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE: CVE-2023-33037
Published: 2024-01-02
Description: Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data.
CVSS Score: 7.1 (HIGH)
CWE: CWE-310, CWE-311
References: https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE: CVE-2023-33038
Published: 2024-01-02
Description: Memory corruption while receiving a message in Bus Socket Transport Server.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-190, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE: CVE-2023-33040
Published: 2024-01-02
Description: Transient DOS in Data Modem during DTLS handshake.
CVSS Score: 7.5 (HIGH)
CWE: CWE-126
References: https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE: CVE-2023-33062
Published: 2024-01-02
Description: Transient DOS in WLAN Firmware while parsing a BTM request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-126
References: https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE: CVE-2023-33085
Published: 2024-01-02
Description: Memory corruption in wearables while processing data from AON.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-120
References: https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE: CVE-2023-33094
Published: 2024-01-02
Description: Memory corruption while running VK synchronization with KASAN enabled.
CVSS Score: 8.4 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE: CVE-2023-33108
Published: 2024-01-02
Description: Memory corruption in Graphics Driver when destroying a context with KGSL_GPU_AUX_COMMAND_TIMELINE objects queued.
CVSS Score: 8.4 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE: CVE-2023-33109
Published: 2024-01-02
Description: Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-476
References: https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE: CVE-2023-33110
Published: 2024-01-02
Description: The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.
CVSS Score: 7.8 (HIGH)
CWE: CWE-823, CWE-362
References: https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE: CVE-2023-33112
Published: 2024-01-02
Description: Transient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element.
CVSS Score: 7.5 (HIGH)
CWE: CWE-126
References: https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE: CVE-2023-33113
Published: 2024-01-02
Description: Memory corruption when resource manager sends the host kernel a reply message with multiple fragments.
CVSS Score: 8.4 (HIGH)
CWE: CWE-120, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE: CVE-2023-33114
Published: 2024-01-02
Description: Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time.
CVSS Score: 8.4 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE: CVE-2023-33116
Published: 2024-01-02
Description: Transient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver.
CVSS Score: 7.5 (HIGH)
CWE: CWE-126, CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE: CVE-2023-33117
Published: 2024-01-02
Description: Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVCS_LOAD_MODULE command.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE: CVE-2023-33118
Published: 2024-01-02
Description: Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE: CVE-2023-33120
Published: 2024-01-02
Description: Memory corruption in Audio when memory map command is executed consecutively in ADSP.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE: CVE-2023-43511
Published: 2024-01-02
Description: Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835, CWE-835
References: https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE: CVE-2023-43512
Published: 2024-01-02
Description: Transient DOS while parsing GATT service data when the total amount of memory that is required by the multiple services is greater than the actual size of the services buffer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-126, CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE: CVE-2023-43514
Published: 2024-01-02
Description: Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP.
CVSS Score: 8.4 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin