CVE-2023-33xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
686 records · Page 7 of 7
- CVE-2023-33090: Buffer Over-read in Audio 5.5 Medium
Transient DOS while processing channel information for speaker protection v2 module in ADSP.
Updated Transient DOS when processing a NULL buffer while parsing WLAN vdev.
UpdatedMemory corruption when processing cmd parameters while parsing vdev.
Updated- CVE-2023-33087: Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Core 7.8 High
Memory corruption in Core while processing RX intent request.
Updated Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers.
Updated- CVE-2023-33085: Buffer Copy Without Checking Size of Input (Classic Buffer Overflow) in Wearables 7.8 High
Memory corruption in wearables while processing data from AON.
Updated Transient DOS while processing IE fragments from server during DTLS handshake.
Updated- CVE-2023-33083: Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host 9.8 Critical
Memory corruption in WLAN Host while processing RRM beacon on the AP.
Updated - CVE-2023-33082: Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host 9.8 Critical
Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE.
Updated Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast.
UpdatedTransient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.
UpdatedMemory corruption in Audio while running invalid audio recording from ADSP.
UpdatedInformation Disclosure while processing IOCTL request in FastRPC.
UpdatedMemory corruption in HLOS while converting from authorization token to HIDL vector.
Updated- CVE-2023-33076: Configuration Issue in Core 5.9 Medium
Memory corruption in Core when updating rollback version for TA and OTA feature is enabled.
Updated Memory corruption in Audio when SSR event is triggered after music playback is stopped.
UpdatedMemory corruption in Core while processing control functions.
UpdatedMemory corruption in Automotive OS whenever untrusted apps try to access HAb for graphics functionalities.
UpdatedTransient DOS in Automotive OS due to improper authentication to the secure IO calls.
UpdatedMemory corruption in Audio while processing the calibration data returned from ACDB loader.
UpdatedMemory corruption in Audio while processing IIR config data from AFE calibration block.
UpdatedMemory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points.
UpdatedMemory corruption in Audio while processing RT proxy port register driver.
Updated- CVE-2023-33065: Buffer Over-read in Audio 6.1 Medium
Information disclosure in Audio while accessing AVCS services from ADSP payload.
Updated - CVE-2023-33064: Buffer Over-read in Audio 5.5 Medium
Transient DOS in Audio when invoking callback function of ASM driver.
Updated Memory corruption in DSP Services during a remote call from HLOS to DSP.
UpdatedTransient DOS in WLAN Firmware while parsing a BTM request.
UpdatedTransient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame.
UpdatedTransient DOS in Core when DDR memory check is called while DDR is not initialized.
UpdatedMemory corruption in Audio while processing the VOC packet data from ADSP.
UpdatedInformation disclosure in Modem while processing SIB5.
UpdatedTransient DOS in Multi-Mode Call Processor while processing UE policy container.
UpdatedTransient DOS in WLAN Firmware when firmware receives beacon including T2LM IE.
UpdatedMemory Corruption in Audio while invoking callback function in driver from ADSP.
UpdatedCryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data.
UpdatedMemory corruption in Kernel while parsing metadata.
UpdatedTransient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage.
UpdatedTransient DOS in WLAN Firmware while parsing t2lm buffers.
UpdatedTransient DOS in WLAN Firmware while parsing no-inherit IES.
Updated- CVE-2023-33046: Time-of-check Time-of-use (TOCTOU) Race Condition in Trusted Execution Environment 7.8 High
Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation.
Updated Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute.
UpdatedTransient DOS in Data modem while handling TLB control messages from the Network.
UpdatedTransient DOS in Modem when a Beam switch request is made with a non-configured BWP.
UpdatedTransient DOS in Modem after RRC Setup message is received.
UpdatedUnder certain scenarios the WLAN Firmware will reach an assertion due to state confusion while looking up peer ids.
UpdatedTransient DOS in Data Modem during DTLS handshake.
UpdatedMemory corruption in Automotive Display while destroying the image handle created using connected display driver.
UpdatedMemory corruption while receiving a message in Bus Socket Transport Server.
UpdatedCryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data.
UpdatedPermanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call.
UpdatedMemory corruption while invoking callback function of AFE from ADSP.
UpdatedMemory corruption while parsing the ADSP response command.
UpdatedMemory corruption in Audio during playback with speaker protection.
UpdatedMemory corruption in TZ Secure OS while requesting a memory allocation from TA region.
UpdatedMemory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.
UpdatedMemory corruption in HLOS while running playready use-case.
UpdatedMemory corruption in DSP Service during a remote call from HLOS to DSP.
UpdatedMemory corruption in WLAN Firmware while doing a memory copy of pmk cache.
UpdatedTransient DOS in WLAN Firmware while parsing rsn ies.
UpdatedTransient DOS in WLAN Firmware while parsing a NAN management frame.
UpdatedMemory corruption in Data Modem when a non-standard SDP body, during a VOLTE call.
UpdatedMemory corruption while sending SMS from AP firmware.
UpdatedMemory corruption while processing finish_sign command to pass a rsp buffer.
UpdatedMemory corruption in HLOS while invoking IOCTL calls from user-space.
UpdatedMemory corruption in Graphics while processing user packets for command submission.
UpdatedTransient DOS in WLAN Host when an invalid channel (like channel out of range) is received in STA during CSA IE.
UpdatedTransient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel in CSA IE.
UpdatedMemory corruption while using the UIM diag command to get the operators name.
UpdatedMemory corruption in Boot while running a ListVars test in UEFI Menu during boot.
UpdatedTransient DOS in WLAN firmware while parsing MLO (multi-link operation).
UpdatedTransient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame.
UpdatedInformation disclosure in Core services while processing a Diag command.
UpdatedA post-authentication command injection vulnerability in the NTP feature of Zyxel NBG6604 firmware version V1.01(ABIR.1)C0 could allow an authenticated attacker to execute some OS commands remotely by sending a crafted HTTP request.
UpdatedA command injection vulnerability in the configuration parser of the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through 5.36 Patch 2, USG FLEX 50(W) series firmware versions 5.10 through 5.36 Patch 2, USG20(W)-VPN series firmware versions 5.10 through 5.36 Patch 2, and VPN series firmware versions 5.00 through 5.36 Patch 2, could allow an
UpdatedA format string vulnerability in the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through 5.36 Patch 2, USG FLEX 50(W) series firmware versions 5.10 through 5.36 Patch 2, USG20(W)-VPN series firmware versions 5.10 through 5.36 Patch 2, and VPN series firmware versions 5.00 through 5.36 Patch 2, could allow an unauthenticated, LAN-based attac
UpdatedA buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware versions 4.50 through 5.36 Patch 1, USG FLEX 50(W) firmware versions 4.25 through 5.36 Patch 1, USG20(W)-VPN firmware versions 4.25 through 5.36 Patch 1, VPN series firmware versions 4.30 through 5.36 Patch 1, ZyWALL/USG series firmware versions 4.
UpdatedA buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX series firmware versions 4.60 through 5.36 Patch 1, USG FLEX 50(W) firmware versions 4.60 through 5.36 Patch 1, USG20(W)-VPN firmware versions 4.60 through 5.36 Patch 1, VPN series firmware versions 4.60 through 5.36 Patch 1, ZyWALL/USG series firmware versions 4.6
UpdatedDeserialization of Untrusted Data vulnerability in Apache Software Foundation Apache Johnzon. A malicious attacker can craft up some JSON input that uses large numbers (numbers such as 1e20000000) that Apache Johnzon will deserialize into BigDecimal and maybe use numbers too large which may result in a slow conversion (Denial of service risk). Apache Johnzon 1.2.21 mitigates this by setting a sc
UpdatedJenkins LoadComplete support Plugin 1.0 and earlier does not escape the LoadComplete test name, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
UpdatedA cross-site request forgery (CSRF) vulnerability in Jenkins WSO2 Oauth Plugin 1.0 and earlier allows attackers to trick users into logging in to the attacker's account.
UpdatedJenkins WSO2 Oauth Plugin 1.0 and earlier does not invalidate the previous session on login.
UpdatedA missing permission check in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers with Overall/Read permission to reset profiler statistics.
UpdatedA cross-site request forgery (CSRF) vulnerability in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers to reset profiler statistics.
UpdatedJenkins TestComplete support Plugin 2.8.1 and earlier does not escape the TestComplete project name, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
UpdatedJenkins HashiCorp Vault Plugin 360.v0a_1c04cf807d and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log when push mode for durable task logging is enabled.
UpdatedJenkins NS-ND Integration Performance Publisher Plugin 4.8.0.149 and earlier does not mask credentials displayed on the configuration form, increasing the potential for attackers to observe and capture them.
Updated