Security Vulnerabilities - CVEs Published In December 2023
CVE-2023-33107
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
Known exploited
CVSS Score
8.4
EPSS Score
0.009
Published
2023-12-05
Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE.
CVSS Score
9.8
EPSS Score
0.005
Published
2023-12-05
Memory corruption in WLAN Host while processing RRM beacon on the AP.
CVSS Score
9.8
EPSS Score
0.005
Published
2023-12-05
Memory corruption in Core while processing RX intent request.
CVSS Score
7.8
EPSS Score
0.002
Published
2023-12-05
Memory corruption when processing cmd parameters while parsing vdev.
CVSS Score
8.4
EPSS Score
0.002
Published
2023-12-05
Transient DOS when processing a NULL buffer while parsing WLAN vdev.
CVSS Score
7.5
EPSS Score
0.005
Published
2023-12-05
CVE-2023-33063
Memory corruption in DSP Services during a remote call from HLOS to DSP.
Known exploited
CVSS Score
7.8
EPSS Score
0.007
Published
2023-12-05
Transient DOS in Automotive OS due to improper authentication to the secure IO calls.
CVSS Score
7.1
EPSS Score
0.001
Published
2023-12-05
Memory corruption in Automotive OS whenever untrusted apps try to access HAb for graphics functionalities.
CVSS Score
8.4
EPSS Score
0.001
Published
2023-12-05
Memory corruption in Audio while running invalid audio recording from ADSP.
CVSS Score
7.8
EPSS Score
0.002
Published
2023-12-05