deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-4521
Published: 2024-05-06
Description: A vulnerability classified as problematic has been found in Campcodes Complete Web-Based School Management System 1.0. Affected is an unknown function of the file /view/teacher_salary_details2.php. The manipulation of the argument index leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263124.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%208.pdf; https://vuldb.com/?ctiid.263124; https://vuldb.com/?id.263124
CVE: CVE-2024-4522
Published: 2024-05-06
Description: A vulnerability classified as problematic was found in Campcodes Complete Web-Based School Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view/teacher_salary_details.php. The manipulation of the argument index leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263125 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%209.pdf; https://vuldb.com/?ctiid.263125; https://vuldb.com/?id.263125
CVE: CVE-2024-4523
Published: 2024-05-06
Description: A vulnerability, which was classified as problematic, has been found in Campcodes Complete Web-Based School Management System 1.0. Affected by this issue is some unknown functionality of the file /view/teacher_attendance_history1.php. The manipulation of the argument year leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-263126 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2010.pdf; https://vuldb.com/?ctiid.263126; https://vuldb.com/?id.263126
CVE: CVE-2024-0904
Published: 2024-05-06
Description: The Fancy Product Designer WordPress plugin before 6.1.81 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/baf4afc9-c20e-47d6-a798-75e15652d1e3/; https://wpscan.com/vulnerability/baf4afc9-c20e-47d6-a798-75e15652d1e3/
CVE: CVE-2024-3752
Published: 2024-05-06
Description: The Crelly Slider WordPress plugin through 1.4.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/e738540a-2006-4b92-8db1-2476374d35bd/; https://wpscan.com/vulnerability/e738540a-2006-4b92-8db1-2476374d35bd/
CVE: CVE-2024-3755
Published: 2024-05-06
Description: The MF Gig Calendar WordPress plugin through 1.2.1 does not sanitise and escape some of its settings, which could allow high privilege users such as editor to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/d34caeaf-2ecf-44a2-b308-e940bafd402c/; https://wpscan.com/vulnerability/d34caeaf-2ecf-44a2-b308-e940bafd402c/
CVE: CVE-2024-3756
Published: 2024-05-06
Description: The MF Gig Calendar WordPress plugin through 1.2.1 does not have CSRF checks in some places, which could allow attackers to make logged in Contributors and above delete arbitrary events via a CSRF attack
CVSS Score: 7.5 (HIGH)
CWE: CWE-352
References: https://wpscan.com/vulnerability/b28d0dca-2df1-4925-be81-dd9c46859c38/; https://wpscan.com/vulnerability/b28d0dca-2df1-4925-be81-dd9c46859c38/
CVE: CVE-2024-4524
Published: 2024-05-06
Description: A vulnerability, which was classified as problematic, was found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /view/student_payment_invoice.php. The manipulation of the argument desc leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263127.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2011.pdf; https://vuldb.com/?ctiid.263127; https://vuldb.com/?id.263127
CVE: CVE-2024-4525
Published: 2024-05-06
Description: A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /view/student_payment_details4.php. The manipulation of the argument index leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263128.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2012.pdf; https://vuldb.com/?ctiid.263128; https://vuldb.com/?id.263128
CVE: CVE-2024-4526
Published: 2024-05-06
Description: A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /view/student_payment_details3.php. The manipulation of the argument month leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263129 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2013.pdf; https://vuldb.com/?ctiid.263129; https://vuldb.com/?id.263129
CVE: CVE-2024-4527
Published: 2024-05-06
Description: A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /view/student_payment_details2.php. The manipulation of the argument index leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-263130 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2014.pdf; https://vuldb.com/?ctiid.263130; https://vuldb.com/?id.263130
CVE: CVE-2024-23186
Published: 2024-05-06
Description: E-Mail containing malicious display-name information could trigger client-side script execution when using specific mobile devices. Attackers could perform malicious API requests or extract information from the users account. Please deploy the provided updates and patch releases. We now use safer methods of handling external content when embedding displayname information to the web interface. No publicly available exploits are known.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://seclists.org/fulldisclosure/2024/May/3; https://documentation.open-xchange.com/appsuite/releases/8.22/; https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2024/oxas-adv-2024-0002.json
CVE: CVE-2024-23187
Published: 2024-05-06
Description: Content-ID based embedding of resources in E-Mails could be abused to trigger client-side script code when using the "show more" option. Attackers could perform malicious API requests or extract information from the users account. Exploiting the vulnerability requires user interaction. Please deploy the provided updates and patch releases. CID replacement has been hardened to omit invalid identifiers. No publicly available exploits are known.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://seclists.org/fulldisclosure/2024/May/3; https://documentation.open-xchange.com/appsuite/releases/8.22/; https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2024/oxas-adv-2024-0002.json
CVE: CVE-2024-23188
Published: 2024-05-06
Description: Maliciously crafted E-Mail attachment names could be used to temporarily execute script code in the context of the users browser session. Common user interaction is required for the vulnerability to trigger. Attackers could perform malicious API requests or extract information from the users account. Please deploy the provided updates and patch releases. We now use safer methods of handling external content when embedding attachment information to the web interface. No publicly available exploits are known.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://seclists.org/fulldisclosure/2024/May/3; https://documentation.open-xchange.com/appsuite/releases/8.22/; https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2024/oxas-adv-2024-0002.json
CVE: CVE-2024-23193
Published: 2024-05-06
Description: E-Mails exported as PDF were stored in a cache that did not consider specific session information for the related user account. Users of the same service node could access other users E-Mails in case they were exported as PDF for a brief moment until caches were cleared. Successful exploitation requires good timing and modification of multiple request parameters. Please deploy the provided updates and patch releases. The cache for PDF exports now takes user session information into consideration when performing authorization decisions. No publicly available exploits are known.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-384
References: http://seclists.org/fulldisclosure/2024/May/3; https://documentation.open-xchange.com/appsuite/releases/8.22/; https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2024/oxas-adv-2024-0002.json
CVE: CVE-2024-4528
Published: 2024-05-06
Description: A vulnerability was found in SourceCodester Prison Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /Admin/user-record.php. The manipulation of the argument txtfullname leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263131.
CVSS Score: 2.4 (LOW)
CWE: CWE-79
References: https://github.com/yylmm/CVE/blob/main/Prison%20Management%20System/xss2.md; https://vuldb.com/?ctiid.263131; https://vuldb.com/?id.263131
CVE: CVE-2023-6854
Published: 2024-05-06
Description: The Breakdance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom postmeta output in all versions up to, and including, 1.7.0 due to insufficient input sanitization and output escaping on user supplied post meta fields. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://breakdance.com/breakdance-1-7-1-now-available-security-update/; https://www.wordfence.com/threat-intel/vulnerabilities/id/e92a0387-bd09-46d3-9f6c-09f701b9e550?source=cve; https://breakdance.com/breakdance-1-7-1-now-available-security-update/
CVE: CVE-2023-49675
Published: 2024-05-06
Description: An unauthenticated local attacker may trick a user to open corrupted project files to execute arbitrary code or crash the system due to an out-of-bounds write vulnerability.

CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://cert.vde.com/en/advisories/VDE-2024-024; https://cert.vde.com/en/advisories/VDE-2024-024
CVE: CVE-2023-49676
Published: 2024-05-06
Description: An unauthenticated local attacker may trick a user to open corrupted project files to crash the system due to use after free vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://cert.vde.com/en/advisories/VDE-2024-024; https://cert.vde.com/en/advisories/VDE-2024-024
CVE: CVE-2024-33753
Published: 2024-05-06
Description: Section Camera V2.5.5.3116-S50-SMA-B20160811 and earlier versions allow the accounts and passwords of administrators and users to be changed without authorization.
CVSS Score: 8.2 (HIGH)
CWE: CWE-200
References: https://github.com/kklzzcun/Camera/blob/main/Camera/%E8%B6%8A%E6%9D%83%E4%BF%AE%E6%94%B9%E7%AE%A1%E7%90%86%E5%91%98%E6%88%96%E7%94%A8%E6%88%B7%E4%BF%A1%E6%81%AF.md; https://github.com/kklzzcun/Camera/blob/main/Camera/%E8%B6%8A%E6%9D%83%E4%BF%AE%E6%94%B9%E7%AE%A1%E7%90%86%E5%91%98%E6%88%96%E7%94%A8%E6%88%B7%E4%BF%A1%E6%81%AF.md
CVE: CVE-2024-3576
Published: 2024-05-06
Description: The NPort 5100A Series firmware version v1.6 and prior versions are affected by web server XSS vulnerability. The vulnerability is caused by not correctly neutralizing user-controllable input before placing it in output. Malicious users may use the vulnerability to get sensitive information and escalate privileges. 
CVSS Score: 8.3 (HIGH)
CWE: CWE-79
References: https://www.moxa.com/en/support/product-support/security-advisory/mpsa-246328-nport-5100a-series-store-xss-vulnerability; https://www.moxa.com/en/support/product-support/security-advisory/mpsa-246328-nport-5100a-series-store-xss-vulnerability
CVE: CVE-2024-33749
Published: 2024-05-06
Description: DedeCMS V5.7.114 is vulnerable to deletion of any file via mail_file_manage.php.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-285
References: https://github.com/QianGeG/CVE/issues/13; https://github.com/QianGeG/CVE/issues/13
CVE: CVE-2024-33788
Published: 2024-05-06
Description: Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the PinCode parameter at /API/info form endpoint.
CVSS Score: 8.0 (HIGH)
CWE: CWE-77
References: https://github.com/ymkyu/CVE/tree/main/CVE-2024-33788; https://github.com/ymkyu/CVE/tree/main/CVE-2024-33788
CVE: CVE-2024-33829
Published: 2024-05-06
Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/readDeal.php?mudi=updateWebCache.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://github.com/xyaly163/cms/blob/main/1.md; https://github.com/xyaly163/cms/blob/main/1.md
CVE: CVE-2024-33830
Published: 2024-05-06
Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/readDeal.php?mudi=clearWebCache.
CVSS Score: 8.1 (HIGH)
CWE: CWE-352
References: https://github.com/xyaly163/cms/blob/main/2.md; https://github.com/xyaly163/cms/blob/main/2.md
CVE: CVE-2024-2041
Published: 2024-05-06
Description: Rejected reason: ***DUPLICATE** Please use CVE-2024-3241 instead.
CVE: CVE-2024-33752
Published: 2024-05-06
Description: An arbitrary file upload vulnerability exists in emlog pro 2.3.0 and pro 2.3.2 at admin/views/plugin.php that could be exploited by a remote attacker to submit a special request to upload a malicious file to execute arbitrary code.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/Myanemo/emlogpro/blob/main/emlog%20pro2.3.2%20File%20upload%20to%20getshell.md; https://github.com/Myanemo/emlogpro/blob/main/emlog%20pro2.3.2%20File%20upload%20to%20getshell.md
CVE: CVE-2024-4547
Published: 2024-05-06
Description: A SQLi vulnerability exists in Delta Electronics DIAEnergie v1.10.1.8610 and prior when CEBC.exe processes a 'RecalculateScript' message, which is splitted into 4 fields using the '~' character as the separator. An unauthenticated remote attacker can perform SQLi via the fourth field
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-89
References: https://www.tenable.com/security/research/tra-2024-13; https://www.tenable.com/security/research/tra-2024-13
CVE: CVE-2024-4548
Published: 2024-05-06
Description: An SQLi vulnerability exists in Delta Electronics DIAEnergie v1.10.1.8610 and prior when CEBC.exe processes a 'RecalculateHDMWYC' message, which is split into 4 fields using the '~' character as the separator. An unauthenticated remote attacker can perform SQLi via the fourth field.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-89
References: https://www.tenable.com/security/research/tra-2024-13; https://www.tenable.com/security/research/tra-2024-13
CVE: CVE-2024-4549
Published: 2024-05-06
Description: A denial of service vulnerability exists in Delta Electronics DIAEnergie v1.10.1.8610 and prior. When processing an 'ICS Restart!' message, CEBC.exe restarts the system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://www.tenable.com/security/research/tra-2024-13; https://www.tenable.com/security/research/tra-2024-13
CVE: CVE-2023-33119
Published: 2024-05-06
Description: Memory corruption while loading a VM from a signed VM image that is not coherent in the processor cache.
CVSS Score: 8.4 (HIGH)
CWE: CWE-367, CWE-367
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html; https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html
CVE: CVE-2023-43521
Published: 2024-05-06
Description: Memory corruption when multiple listeners are being registered with the same file descriptor.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html; https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html
CVE: CVE-2023-43524
Published: 2024-05-06
Description: Memory corruption when the bandpass filter order received from AHAL is not within the expected range.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html; https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html
CVE: CVE-2023-43525
Published: 2024-05-06
Description: Memory corruption while copying the sound model data from user to kernel buffer during sound model register.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html; https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html
CVE: CVE-2023-43526
Published: 2024-05-06
Description: Memory corruption while querying module parameters from Listen Sound model client in kernel from user space.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html; https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html
CVE: CVE-2023-43527
Published: 2024-05-06
Description: Information disclosure while parsing dts header atom in Video.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-126, CWE-125
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html; https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html
CVE: CVE-2023-43528
Published: 2024-05-06
Description: Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-126, CWE-125
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html; https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html
CVE: CVE-2023-43529
Published: 2024-05-06
Description: Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617, CWE-617
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html; https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html
CVE: CVE-2023-43530
Published: 2024-05-06
Description: Memory corruption in HLOS while checking for the storage type.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html; https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html
CVE: CVE-2023-43531
Published: 2024-05-06
Description: Memory corruption while verifying the serialized header when the key pairs are generated.
CVSS Score: 8.4 (HIGH)
CWE: CWE-824, CWE-824
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html; https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html
CVE: CVE-2024-21471
Published: 2024-05-06
Description: Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.
CVSS Score: 8.4 (HIGH)
CWE: CWE-416, CWE-416
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html; https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html
CVE: CVE-2024-21474
Published: 2024-05-06
Description: Memory corruption when size of buffer from previous call is used without validation or re-initialization.
CVSS Score: 8.4 (HIGH)
CWE: CWE-121, CWE-787
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html; https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html
CVE: CVE-2024-21475
Published: 2024-05-06
Description: Memory corruption when the payload received from firmware is not as per the expected protocol size.
CVSS Score: 7.8 (HIGH)
CWE: CWE-823, CWE-119
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html; https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html
CVE: CVE-2024-21476
Published: 2024-05-06
Description: Memory corruption when the channel ID passed by user is not validated and further used.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-787
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html; https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html
CVE: CVE-2024-21477
Published: 2024-05-06
Description: Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame.
CVSS Score: 7.5 (HIGH)
CWE: CWE-126, CWE-125
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html; https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html
CVE: CVE-2024-21480
Published: 2024-05-06
Description: Memory corruption while playing audio file having large-sized input buffer.
CVSS Score: 7.3 (HIGH)
CWE: CWE-120, CWE-120
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html; https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html
CVE: CVE-2024-23351
Published: 2024-05-06
Description: Memory corruption as GPU registers beyond the last protected range can be accessed through LPAC submissions.
CVSS Score: 8.4 (HIGH)
CWE: CWE-284
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html; https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html