Veille CVE

Mardi 5 décembre 2023

4 CVE

  1. CVE-2023-33107 – Non évaluée Exploitée

    Qualcomm Multiple Chipsets

    Qualcomm Multiple Chipsets Integer Overflow Vulnerability — Multiple Qualcomm chipsets contain an integer overflow vulnerability due to memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

  2. CVE-2023-33106 – Non évaluée Exploitée

    Qualcomm Multiple Chipsets

    Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability — Multiple Qualcomm chipsets contain a use of out-of-range pointer offset vulnerability due to memory corruption in Graphics while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

  3. CVE-2023-33063 – Non évaluée Exploitée

    Qualcomm Multiple Chipsets

    Qualcomm Multiple Chipsets Use-After-Free Vulnerability — Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services during a remote call from HLOS to DSP.

  4. CVE-2022-22071 – Non évaluée Exploitée

    Qualcomm Multiple Chipsets

    Qualcomm Multiple Chipsets Use-After-Free Vulnerability — Multiple Qualcomm chipsets contain a use-after-free vulnerability when process shell memory is freed using IOCTL munmap call and process initialization is in progress.