2023 CVE Vulnerabilities
31,244 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-33117 | HIGH | 7.8 | 0.1% | Jan 2, 2024 | Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVC... |
| CVE-2023-33116 | HIGH | 7.5 | 0.3% | Jan 2, 2024 | Transient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver. |
| CVE-2023-33114 | HIGH | 7.8 | 0.1% | Jan 2, 2024 | Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitt... |
| CVE-2023-33113 | HIGH | 7.8 | 0.1% | Jan 2, 2024 | Memory corruption when resource manager sends the host kernel a reply message with multiple fragments. |
| CVE-2023-33112 | HIGH | 7.5 | 0.3% | Jan 2, 2024 | Transient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element. |
| CVE-2023-33110 | HIGH | 7 | 0.1% | Jan 2, 2024 | The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback fr... |
| CVE-2023-33109 | HIGH | 7.5 | 0.3% | Jan 2, 2024 | Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host. |
| CVE-2023-33108 | HIGH | 7.8 | 0.1% | Jan 2, 2024 | Memory corruption in Graphics Driver when destroying a context with KGSL_GPU_AUX_COMMAND_TIMELINE objects queued. |
| CVE-2023-33094 | HIGH | 7.8 | 0.1% | Jan 2, 2024 | Memory corruption while running VK synchronization with KASAN enabled. |
| CVE-2023-33085 | HIGH | 7.8 | 0.1% | Jan 2, 2024 | Memory corruption in wearables while processing data from AON. |
| CVE-2023-33062 | HIGH | 7.5 | 0.3% | Jan 2, 2024 | Transient DOS in WLAN Firmware while parsing a BTM request. |
| CVE-2023-33040 | HIGH | 7.5 | 0.3% | Jan 2, 2024 | Transient DOS in Data Modem during DTLS handshake. |
| CVE-2023-33038 | HIGH | 7.8 | 0.1% | Jan 2, 2024 | Memory corruption while receiving a message in Bus Socket Transport Server. |
| CVE-2023-33033 | HIGH | 7.8 | 0.1% | Jan 2, 2024 | Memory corruption in Audio during playback with speaker protection. |
| CVE-2023-33032 | HIGH | 7.8 | 0.1% | Jan 2, 2024 | Memory corruption in TZ Secure OS while requesting a memory allocation from TA region. |
| CVE-2023-33030 | HIGH | 7.8 | 0.1% | Jan 2, 2024 | Memory corruption in HLOS while running playready use-case. |
| CVE-2023-28583 | HIGH | 7.8 | 0.1% | Jan 2, 2024 | Memory corruption when IPv6 prefix timer object`s lifetime expires which are created while Netmgr daemon gets an IPv6 ad... |
| CVE-2023-26157 | HIGH | 7.5 | 0.5% | Jan 2, 2024 | Versions of the package libredwg before 0.12.5.6384 are vulnerable to Denial of Service (DoS) due to an out-of-bounds re... |
| CVE-2023-32890 | HIGH | 7.5 | 0.8% | Jan 2, 2024 | In modem EMM, there is a possible system crash due to improper input validation. This could lead to remote denial of ser... |
| CVE-2023-32889 | HIGH | 7.5 | 0.4% | Jan 2, 2024 | In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote d... |
| CVE-2023-32888 | HIGH | 7.5 | 0.9% | Jan 2, 2024 | In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote d... |
| CVE-2023-32887 | HIGH | 7.5 | 0.9% | Jan 2, 2024 | In Modem IMS Stack, there is a possible system crash due to a missing bounds check. This could lead to remote denial of ... |
| CVE-2023-32886 | HIGH | 7.5 | 0.8% | Jan 2, 2024 | In Modem IMS SMS UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote de... |
| CVE-2023-50096 | HIGH | 7.5 | 0.6% | Jan 1, 2024 | STMicroelectronics STSAFE-A1xx middleware before 3.3.7 allows MCU code execution if an adversary has the ability to read... |
| CVE-2023-50094 | HIGH | 8.8 | 13.5% | Jan 1, 2024 | reNgine before 2.1.2 allows OS Command Injection if an adversary has a valid session ID. The attack places shell metacha... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now