deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-40015
Published: 2023-09-04
Description: Vyper is a Pythonic Smart Contract Language. For the following (probably non-exhaustive) list of expressions, the compiler evaluates the arguments from right to left instead of left to right. `unsafe_add, unsafe_sub, unsafe_mul, unsafe_div, pow_mod256, |, &, ^ (bitwise operators), bitwise_or (deprecated), bitwise_and (deprecated), bitwise_xor (deprecated), raw_call, <, >, <=, >=, ==, !=, in, not in (when lhs and rhs are enums)`. This behaviour becomes a problem when the evaluation of one of the arguments produces side effects that other arguments depend on. The following expressions can produce side-effect: state modifying external call , state modifying internal call, `raw_call`, `pop()` when used on a Dynamic Array stored in the storage, `create_minimal_proxy_to`, `create_copy_of`, `create_from_blueprint`. This issue has not yet been patched. Users are advised to make sure that the arguments of the expression do not produce side effects or, if one does, that no other argument is dependent on those side effects.
CVSS Score: 3.7 (LOW)
CWE: CWE-670
References: https://github.com/vyperlang/vyper/security/advisories/GHSA-g2xh-c426-v8mf; https://github.com/vyperlang/vyper/security/advisories/GHSA-g2xh-c426-v8mf
CVE: CVE-2023-41052
Published: 2023-09-04
Description: Vyper is a Pythonic Smart Contract Language. In affected versions the order of evaluation of the arguments of the builtin functions `uint256_addmod`, `uint256_mulmod`, `ecadd` and `ecmul` does not follow source order. This behaviour is problematic when the evaluation of one of the arguments produces side effects that other arguments depend on. A patch is currently being developed on pull request #3583. When using builtins from the list above, users should make sure that the arguments of the expression do not produce side effects or, if one does, that no other argument is dependent on those side effects.
CVSS Score: 3.7 (LOW)
CWE: CWE-670, CWE-670
References: https://github.com/vyperlang/vyper/pull/3583; https://github.com/vyperlang/vyper/security/advisories/GHSA-4hg4-9mf5-wxxq; https://github.com/vyperlang/vyper/pull/3583
CVE: CVE-2023-41054
Published: 2023-09-04
Description: LibreY is a fork of LibreX, a framework-less and javascript-free privacy respecting meta search engine. LibreY is subject to a Server-Side Request Forgery (SSRF) vulnerability in the `image_proxy.php` file of LibreY before commit 8f9b9803f231e2954e5b49987a532d28fe50a627. This vulnerability allows remote attackers to use the server as a proxy to send HTTP GET requests to arbitrary targets and retrieve information in the internal network or conduct Denial-of-Service (DoS) attacks via the `url` parameter. Remote attackers can use the server as a proxy to send HTTP GET requests and retrieve information in the internal network. Remote attackers can also request the server to download large files or chain requests among multiple instances to reduce the performance of the server or even deny access from legitimate users. This issue has been addressed in https://github.com/Ahwxorg/LibreY/pull/31. LibreY hosters are advised to use the latest commit. There are no known workarounds for this vulnerability.
CVSS Score: 8.2 (HIGH)
CWE: CWE-918
References: https://github.com/Ahwxorg/LibreY/pull/31; https://github.com/Ahwxorg/LibreY/security/advisories/GHSA-p4f9-h8x8-mpwf; https://github.com/Ahwxorg/LibreY/pull/31
CVE: CVE-2023-41055
Published: 2023-09-04
Description: LibreY is a fork of LibreX, a framework-less and javascript-free privacy respecting meta search engine. LibreY is subject to a Server-Side Request Forgery (SSRF) vulnerability in the `engines/google/text.php` and `engines/duckduckgo/text.php` files in versions before commit be59098abd119cda70b15bf3faac596dfd39a744. This vulnerability allows remote attackers to request the server to send HTTP GET requests to arbitrary targets and conduct Denial-of-Service (DoS) attacks via the `wikipedia_language` cookie. Remote attackers can request the server to download large files to reduce the performance of the server or even deny access from legitimate users. This issue has been patched in https://github.com/Ahwxorg/LibreY/pull/9. LibreY hosters are advised to use the latest commit. There are no known workarounds for this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://github.com/Ahwxorg/LibreY/pull/9; https://github.com/Ahwxorg/LibreY/security/advisories/GHSA-xfj6-4vp9-8rgc; https://github.com/Ahwxorg/LibreY/pull/9
CVE: CVE-2023-41057
Published: 2023-09-04
Description: hyper-bump-it is a command line tool for updating the version in project files.`hyper-bump-it` reads a file glob pattern from the configuration file. That is combined with the project root directory to construct a full glob pattern that is used to find files that should be edited. These matched files should be contained within the project root directory, but that is not checked. This could result in changes being written to files outside of the project. The default behaviour of `hyper-bump-it` is to display the planned changes and prompt the user for confirmation before editing any files. However, the configuration file provides a field that can be used cause files to be edited without displaying the prompt. This issue has been fixed in release version 0.5.1. Users are advised to upgrade. Users that are unable to update from vulnerable versions, executing `hyper-bump-it` with the `--interactive` command line argument will ensure that all planned changes are displayed and prompt the user for confirmation before editing any files, even if the configuration file contains `show_confirm_prompt=true`.

CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/plannigan/hyper-bump-it/pull/307; https://github.com/plannigan/hyper-bump-it/security/advisories/GHSA-xc27-f9q3-4448; https://github.com/plannigan/hyper-bump-it/pull/307
CVE: CVE-2023-3995
Published: 2023-09-04
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is a duplicate of CVE-2023-4147.
CVE: CVE-2023-41058
Published: 2023-09-04
Description: Parse Server is an open source backend server. In affected versions the Parse Cloud trigger `beforeFind` is not invoked in certain conditions of `Parse.Query`. This can pose a vulnerability for deployments where the `beforeFind` trigger is used as a security layer to modify the incoming query. The vulnerability has been fixed by refactoring the internal query pipeline for a more concise code structure and implementing a patch to ensure the `beforeFind` trigger is invoked. This fix was introduced in commit `be4c7e23c6` and has been included in releases 6.2.2 and 5.5.5. Users are advised to upgrade. Users unable to upgrade should make use of parse server's security layers to manage access levels with Class-Level Permissions and Object-Level Access Control that should be used instead of custom security layers in Cloud Code triggers.
CVSS Score: 7.5 (HIGH)
CWE: CWE-670
References: https://docs.parseplatform.org/parse-server/guide/#security; https://github.com/parse-community/parse-server/commit/be4c7e23c63a2fb690685665cebed0de26be05c5; https://github.com/parse-community/parse-server/releases/tag/5.5.5
CVE: CVE-2022-43903
Published: 2023-09-05
Description: IBM Security Guardium 10.6, 11.3, and 11.4 could allow an authenticated user to cause a denial of service due to due to improper input validation.  IBM X-Force ID:  240894.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/240894; https://www.ibm.com/support/pages/node/7030110; https://exchange.xforce.ibmcloud.com/vulnerabilities/240894
CVE: CVE-2023-32338
Published: 2023-09-05
Description: IBM Sterling Secure Proxy and IBM Sterling External Authentication Server 6.0.3 and 6.1.0 stores user credentials in plain clear text which can be read by a local user with container access.  IBM X-Force ID:  255585.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-522
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/255585; https://https://www.ibm.com/support/pages/node/7029765; https://www.ibm.com/support/pages/node/7029766
CVE: CVE-2023-35892
Published: 2023-09-05
Description: IBM Financial Transaction Manager for SWIFT Services 3.2.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.  IBM X-Force ID:  258786.
CVSS Score: 7.1 (HIGH)
CWE: CWE-611, CWE-611
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/258786; https://www.ibm.com/support/pages/node/7030359; https://exchange.xforce.ibmcloud.com/vulnerabilities/258786
CVE: CVE-2023-22870
Published: 2023-09-05
Description: IBM Aspera Faspex 5.0.5 transmits sensitive information in cleartext which could be obtained by an attacker using man in the middle techniques.  IBM X-Force ID:  244121.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-319, CWE-319
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/244121; https://www.ibm.com/support/pages/node/7029681; https://exchange.xforce.ibmcloud.com/vulnerabilities/244121
CVE: CVE-2023-29261
Published: 2023-09-05
Description: IBM Sterling Secure Proxy 6.0.3 and 6.1.0 could allow a local user with specific information about the system to obtain privileged information due to inadequate memory clearing during operations.  IBM X-Force ID:  252139.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-922, CWE-922
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/252139; https://https://www.ibm.com/support/pages/node/7029765; https://www.ibm.com/support/pages/node/7029765
CVE: CVE-2023-35906
Published: 2023-09-05
Description: IBM Aspera Faspex 5.0.5 could allow a remote attacked to bypass IP restrictions due to improper access controls.  IBM X-Force ID:  259649.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-291, CWE-345
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/259649; https://www.ibm.com/support/pages/node/7029681; https://exchange.xforce.ibmcloud.com/vulnerabilities/259649
CVE: CVE-2023-4636
Published: 2023-09-05
Description: The WordPress File Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/xsn1210/vul2/blob/main/xss%5BWordPressFile%5D%20.md; https://plugins.trac.wordpress.org/changeset/2961909/user-private-files; https://www.wordfence.com/threat-intel/vulnerabilities/id/1df04293-87e9-4ab4-975d-54d36a993ab0?source=cve
CVE: CVE-2023-36308
Published: 2023-09-05
Description: disintegration Imaging 1.6.2 allows attackers to cause a panic (because of an integer index out of range during a Grayscale call) via a crafted TIFF file to the scan function of scanner.go. NOTE: it is unclear whether there are common use cases in which this panic could have any security consequence
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-129
References: https://github.com/disintegration/imaging/issues/165; https://github.com/disintegration/imaging/releases/tag/v1.6.2; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3GX2SYGRCNFUAGELLDOBIERCSCYSGKFY/
CVE: CVE-2023-40936
Published: 2023-09-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2023-40937
Published: 2023-09-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2023-36307
Published: 2023-09-05
Description: ZPLGFA 1.1.1 allows attackers to cause a panic (because of an integer index out of range during a ConvertToGraphicField call) via an image of zero width. NOTE: it is unclear whether there are common use cases in which this panic could have any security consequence
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-129
References: https://github.com/SimonWaldherr/zplgfa/pull/6; https://github.com/SimonWaldherr/zplgfa/pull/6
CVE: CVE-2023-4748
Published: 2023-09-05
Description: A vulnerability, which was classified as critical, has been found in Yongyou UFIDA-NC up to 20230807. This issue affects some unknown processing of the file PrintTemplateFileServlet.java. The manipulation of the argument filePath leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-238637 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/houseoforange/mybugs/blob/main/Yongyou-UFIDA-NC-Arbitrary-File-Read.pdf; https://vuldb.com/?ctiid.238637; https://vuldb.com/?id.238637
CVE: CVE-2022-33220
Published: 2023-09-05
Description: Information disclosure in Automotive multimedia due to buffer over-read.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-126, CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE: CVE-2022-33275
Published: 2023-09-05
Description: Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.
CVSS Score: 8.4 (HIGH)
CWE: CWE-129, CWE-129
References: https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE: CVE-2022-40524
Published: 2023-09-05
Description: Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-126, CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE: CVE-2022-40534
Published: 2023-09-05
Description: Memory corruption due to improper validation of array index in Audio.
CVSS Score: 8.4 (HIGH)
CWE: CWE-129, CWE-129
References: https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE: CVE-2023-21636
Published: 2023-09-05
Description: Memory Corruption due to improper validation of array index in Linux while updating adn record.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-129, CWE-129
References: https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE: CVE-2023-21644
Published: 2023-09-05
Description: Memory corruption in RIL due to Integer Overflow while triggering qcril_uim_request_apdu request.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-680, CWE-190
References: https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE: CVE-2023-21646
Published: 2023-09-05
Description: Transient DOS in Modem while processing invalid System Information Block 1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617, CWE-617
References: https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE: CVE-2023-21653
Published: 2023-09-05
Description: Transient DOS in Modem while processing RRC reconfiguration message.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617, CWE-617
References: https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE: CVE-2023-21654
Published: 2023-09-05
Description: Memory corruption in Audio during playback session with audio effects enabled.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-119, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE: CVE-2023-21655
Published: 2023-09-05
Description: Memory corruption in Audio while validating and mapping metadata.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE: CVE-2023-21662
Published: 2023-09-05
Description: Memory corruption in Core Platform while printing the response buffer in log.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-120
References: https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE: CVE-2023-21663
Published: 2023-09-05
Description: Memory Corruption while accessing metadata in Display.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-119, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE: CVE-2023-21664
Published: 2023-09-05
Description: Memory Corruption in Core Platform while printing the response buffer in log.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE: CVE-2023-21667
Published: 2023-09-05
Description: Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-126, CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE: CVE-2023-28538
Published: 2023-09-05
Description: Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region.
CVSS Score: 8.4 (HIGH)
CWE: CWE-121, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE: CVE-2023-28543
Published: 2023-09-05
Description: A malformed DLC can trigger Memory Corruption in SNPE library due to out of bounds read, such as by loading an untrusted model (e.g. from a remote source).
CVSS Score: 8.1 (HIGH)
CWE: CWE-125, CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE: CVE-2023-28544
Published: 2023-09-05
Description: Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-120
References: https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE: CVE-2023-28548
Published: 2023-09-05
Description: Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART.
CVSS Score: 7.8 (HIGH)
CWE: CWE-129, CWE-129
References: https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE: CVE-2023-28549
Published: 2023-09-05
Description: Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE: CVE-2023-28557
Published: 2023-09-05
Description: Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload.
CVSS Score: 7.8 (HIGH)
CWE: CWE-129, CWE-129
References: https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE: CVE-2023-28558
Published: 2023-09-05
Description: Memory corruption in WLAN handler while processing PhyID in Tx status handler.
CVSS Score: 7.8 (HIGH)
CWE: CWE-129, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE: CVE-2023-28559
Published: 2023-09-05
Description: Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE: CVE-2023-28560
Published: 2023-09-05
Description: Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE: CVE-2023-28562
Published: 2023-09-05
Description: Memory corruption while handling payloads from remote ESL.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE: CVE-2023-28564
Published: 2023-09-05
Description: Memory corruption in WLAN HAL while passing command parameters through WMI interfaces.
CVSS Score: 7.8 (HIGH)
CWE: CWE-823, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE: CVE-2023-28565
Published: 2023-09-05
Description: Memory corruption in WLAN HAL while handling command streams through WMI interfaces.
CVSS Score: 7.8 (HIGH)
CWE: CWE-129, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE: CVE-2023-28567
Published: 2023-09-05
Description: Memory corruption in WLAN HAL while handling command through WMI interfaces.
CVSS Score: 7.8 (HIGH)
CWE: CWE-129, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE: CVE-2023-28573
Published: 2023-09-05
Description: Memory corruption in WLAN HAL while parsing WMI command parameters.
CVSS Score: 7.8 (HIGH)
CWE: CWE-129, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE: CVE-2023-28581
Published: 2023-09-05
Description: Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE: CVE-2023-28584
Published: 2023-09-05
Description: Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement (CSA).
CVSS Score: 7.5 (HIGH)
CWE: CWE-285
References: https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin