# Vulnerabilities published in 2023


- [CVE-2023-52549](https://insights.sbomify.com/CVE-2023-52549/): Memory corruption in EMUI (high 7.5)
- [CVE-2023-52548](https://insights.sbomify.com/CVE-2023-52548/): Memory corruption in CurieM-WFG9B (high 7.8)
- [CVE-2023-52547](https://insights.sbomify.com/CVE-2023-52547/): Memory corruption in CurieM-WFG9B (high 7.8)
- [CVE-2023-52546](https://insights.sbomify.com/CVE-2023-52546/): Security feature bypass in EMUI (high 7.5)
- [CVE-2023-52545](https://insights.sbomify.com/CVE-2023-52545/): Misconfiguration in EMUI (high 7.5)
- [CVE-2023-52544](https://insights.sbomify.com/CVE-2023-52544/): Path traversal in EMUI (medium 4.3)
- [CVE-2023-52543](https://insights.sbomify.com/CVE-2023-52543/): Missing authorization in EMUI (medium 6.2)
- [CVE-2023-52542](https://insights.sbomify.com/CVE-2023-52542/): Missing authorization in EMUI (medium 6.5)
- [CVE-2023-52541](https://insights.sbomify.com/CVE-2023-52541/): Missing authorization in EMUI (high 7.5)
- [CVE-2023-52540](https://insights.sbomify.com/CVE-2023-52540/): Auth bypass in EMUI (high 7.5)
- [CVE-2023-5254](https://insights.sbomify.com/CVE-2023-5254/): AI ChatBot <= 4.8.9 - Unauthenticated Sensitive Information Exposure via qcld_wb_chatbot_check_user (medium 5.3)
- [CVE-2023-52539](https://insights.sbomify.com/CVE-2023-52539/): Missing authorization in EMUI (high 7.5)
- [CVE-2023-52538](https://insights.sbomify.com/CVE-2023-52538/): Security feature bypass in EMUI (critical 9.1)
- [CVE-2023-52537](https://insights.sbomify.com/CVE-2023-52537/): Security feature bypass in EMUI (high 7.5)
- [CVE-2023-52536](https://insights.sbomify.com/CVE-2023-52536/): Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 4.4)
- [CVE-2023-52535](https://insights.sbomify.com/CVE-2023-52535/): Denial of service in SC7731E/SC9832E/SC9863A/T310/T610/T618 (medium 4.4)
- [CVE-2023-52534](https://insights.sbomify.com/CVE-2023-52534/): Denial of service in T760/T770/T820/S8000 (medium 5.9)
- [CVE-2023-52533](https://insights.sbomify.com/CVE-2023-52533/): Information disclosure in T760/T770/T820/S8000 (medium 5.3)
- [CVE-2023-52532](https://insights.sbomify.com/CVE-2023-52532/): net: mana: Fix TX CQE error handling (medium 5.5)
- [CVE-2023-52531](https://insights.sbomify.com/CVE-2023-52531/): wifi: iwlwifi: mvm: Fix a memory corruption issue (high 7.8)
- [CVE-2023-52530](https://insights.sbomify.com/CVE-2023-52530/): wifi: mac80211: fix potential key use-after-free (high 8.8)
- [CVE-2023-5253](https://insights.sbomify.com/CVE-2023-5253/): Check Point IoT integration: WebSocket returns assets data without authentication in Guardian/CMC before 23.3.0 (medium 6.3)
- [CVE-2023-52529](https://insights.sbomify.com/CVE-2023-52529/): HID: sony: Fix a potential memory leak in sony_probe() (medium 6.0)
- [CVE-2023-52528](https://insights.sbomify.com/CVE-2023-52528/): net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (medium 5.5)
- [CVE-2023-52527](https://insights.sbomify.com/CVE-2023-52527/): ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() (medium 5.5)
- [CVE-2023-52526](https://insights.sbomify.com/CVE-2023-52526/): erofs: fix memory leak of LZMA global compressed deduplication (medium 5.5)
- [CVE-2023-52525](https://insights.sbomify.com/CVE-2023-52525/): wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (high 7.1)
- [CVE-2023-52524](https://insights.sbomify.com/CVE-2023-52524/): net: nfc: llcp: Add lock when modifying device list (high 7.8)
- [CVE-2023-52523](https://insights.sbomify.com/CVE-2023-52523/): bpf, sockmap: Reject sk_msg egress redirects to non-TCP sockets (high 7.8)
- [CVE-2023-52522](https://insights.sbomify.com/CVE-2023-52522/): net: fix possible store tearing in neigh_periodic_work() (high 8.8)
- [CVE-2023-52520](https://insights.sbomify.com/CVE-2023-52520/): platform/x86: think-lmi: Fix reference leak (medium 5.5)
- [CVE-2023-5252](https://insights.sbomify.com/CVE-2023-5252/): FareHarbor for WordPress <= 3.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (medium 6.4)
- [CVE-2023-52519](https://insights.sbomify.com/CVE-2023-52519/): HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit (high 7.1)
- [CVE-2023-52518](https://insights.sbomify.com/CVE-2023-52518/): Bluetooth: hci_codec: Fix leaking content of local_codecs (medium 5.5)
- [CVE-2023-52517](https://insights.sbomify.com/CVE-2023-52517/): spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain (high 7.8)
- [CVE-2023-52516](https://insights.sbomify.com/CVE-2023-52516/): dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock (medium 5.5)
- [CVE-2023-52515](https://insights.sbomify.com/CVE-2023-52515/): RDMA/srp: Do not call scsi_done() from srp_abort() (critical 9.8)
- [CVE-2023-52513](https://insights.sbomify.com/CVE-2023-52513/): RDMA/siw: Fix connection failure handling (high 7.5)
- [CVE-2023-52512](https://insights.sbomify.com/CVE-2023-52512/): pinctrl: nuvoton: wpcm450: fix out of bounds write (medium 5.5)
- [CVE-2023-52511](https://insights.sbomify.com/CVE-2023-52511/): spi: sun6i: reduce DMA RX transfer width to single byte (medium 5.3)
- [CVE-2023-52510](https://insights.sbomify.com/CVE-2023-52510/): ieee802154: ca8210: Fix a potential UAF in ca8210_probe (high 7.8)
- [CVE-2023-5251](https://insights.sbomify.com/CVE-2023-5251/): Grid Plus <= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) Grid Layout Add/Update/Delete (medium 5.4)
- [CVE-2023-52509](https://insights.sbomify.com/CVE-2023-52509/): ravb: Fix use-after-free issue in ravb_tx_timeout_work() (high 7.8)
- [CVE-2023-52508](https://insights.sbomify.com/CVE-2023-52508/): nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid() (medium 5.5)
- [CVE-2023-52507](https://insights.sbomify.com/CVE-2023-52507/): nfc: nci: assert requested protocol is valid (high 7.1)
- [CVE-2023-52506](https://insights.sbomify.com/CVE-2023-52506/): LoongArch: Set all reserved memblocks on Node#0 at initialization (medium 5.5)
- [CVE-2023-52505](https://insights.sbomify.com/CVE-2023-52505/): phy: lynx-28g: serialize concurrent phy_set_mode_ext() calls to shared registers (medium 4.7)
- [CVE-2023-52504](https://insights.sbomify.com/CVE-2023-52504/): x86/alternatives: Disable KASAN in apply_alternatives() (high 7.1)
- [CVE-2023-52503](https://insights.sbomify.com/CVE-2023-52503/): tee: amdtee: fix use-after-free vulnerability in amdtee_close_session (high 7.8)
- [CVE-2023-52502](https://insights.sbomify.com/CVE-2023-52502/): net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (high 8.8)
- [CVE-2023-52501](https://insights.sbomify.com/CVE-2023-52501/): ring-buffer: Do not attempt to read past "commit" (high 7.1)
- [CVE-2023-52500](https://insights.sbomify.com/CVE-2023-52500/): scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command (medium 5.5)
- [CVE-2023-5250](https://insights.sbomify.com/CVE-2023-5250/): Grid Plus <= 1.3.3 - Authenticated (Subscriber+) Local File Inclusion via Shortcode (high 8.8)
- [CVE-2023-52499](https://insights.sbomify.com/CVE-2023-52499/): powerpc/47x: Fix 47x syscall return crash (medium 5.5)
- [CVE-2023-52498](https://insights.sbomify.com/CVE-2023-52498/): PM: sleep: Fix possible deadlocks in core system-wide PM code (medium 5.5)
- [CVE-2023-52497](https://insights.sbomify.com/CVE-2023-52497/): erofs: fix lz4 inplace decompression (high 7.1)
- [CVE-2023-52495](https://insights.sbomify.com/CVE-2023-52495/): soc: qcom: pmic_glink_altmode: fix port sanity check (high 7.8)
- [CVE-2023-52494](https://insights.sbomify.com/CVE-2023-52494/): bus: mhi: host: Add alignment check for event ring read pointer (high 7.8)
- [CVE-2023-52493](https://insights.sbomify.com/CVE-2023-52493/): bus: mhi: host: Drop chan lock before queuing buffers (medium 5.5)
- [CVE-2023-52492](https://insights.sbomify.com/CVE-2023-52492/): dmaengine: fix NULL pointer in channel unregistration function (medium 4.4)
- [CVE-2023-52491](https://insights.sbomify.com/CVE-2023-52491/): media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run (high 7.8)
- [CVE-2023-52490](https://insights.sbomify.com/CVE-2023-52490/): mm: migrate: fix getting incorrect page mapping during page migration (medium 5.5)
- [CVE-2023-5249](https://insights.sbomify.com/CVE-2023-5249/): Mali GPU Kernel Driver allows improper GPU memory processing operations (high 7.0)
- [CVE-2023-52489](https://insights.sbomify.com/CVE-2023-52489/): mm/sparsemem: fix race in accessing memory_section->usage (medium 4.7)
- [CVE-2023-52488](https://insights.sbomify.com/CVE-2023-52488/): serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO (medium 5.5)
- [CVE-2023-52487](https://insights.sbomify.com/CVE-2023-52487/): net/mlx5e: Fix peer flow lists handling (medium 5.5)
- [CVE-2023-52486](https://insights.sbomify.com/CVE-2023-52486/): drm: Don't unref the same fb many times by mistake due to deadlock handling (high 7.8)
- [CVE-2023-52485](https://insights.sbomify.com/CVE-2023-52485/): drm/amd/display: Wake DMCUB before sending a command (medium 5.5)
- [CVE-2023-52484](https://insights.sbomify.com/CVE-2023-52484/): iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range (medium 5.5)
- [CVE-2023-52483](https://insights.sbomify.com/CVE-2023-52483/): mctp: perform route lookups under a RCU read-side lock (high 7.8)
- [CVE-2023-52482](https://insights.sbomify.com/CVE-2023-52482/): x86/srso: Add SRSO mitigation for Hygon processors (high 7.8)
- [CVE-2023-52481](https://insights.sbomify.com/CVE-2023-52481/): arm64: errata: Add Cortex-A520 speculative unprivileged load workaround (medium 4.7)
- [CVE-2023-52480](https://insights.sbomify.com/CVE-2023-52480/): ksmbd: fix race condition between session lookup and expire (critical 9.8)
- [CVE-2023-52479](https://insights.sbomify.com/CVE-2023-52479/): ksmbd: fix uaf in smb20_oplock_break_ack (high 8.8)
- [CVE-2023-52478](https://insights.sbomify.com/CVE-2023-52478/): HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (high 8.8)
- [CVE-2023-52477](https://insights.sbomify.com/CVE-2023-52477/): usb: hub: Guard against accesses to uninitialized BOS descriptors (medium 5.5)
- [CVE-2023-52476](https://insights.sbomify.com/CVE-2023-52476/): perf/x86/lbr: Filter vsyscall addresses (medium 5.5)
- [CVE-2023-52475](https://insights.sbomify.com/CVE-2023-52475/): Input: powermate - fix use-after-free in powermate_config_complete (high 7.8)
- [CVE-2023-52474](https://insights.sbomify.com/CVE-2023-52474/): IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests (high 7.8)
- [CVE-2023-52473](https://insights.sbomify.com/CVE-2023-52473/): thermal: core: Fix NULL pointer dereference in zone registration error path (medium 5.5)
- [CVE-2023-52472](https://insights.sbomify.com/CVE-2023-52472/): crypto: rsa - add a check for allocation failure (medium 5.5)
- [CVE-2023-52471](https://insights.sbomify.com/CVE-2023-52471/): ice: Fix some null pointer dereference issues in ice_ptp.c (medium 5.5)
- [CVE-2023-52470](https://insights.sbomify.com/CVE-2023-52470/): drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (medium 5.5)
- [CVE-2023-5247](https://insights.sbomify.com/CVE-2023-5247/): Code injection in GX Works3 (high 7.8)
- [CVE-2023-52469](https://insights.sbomify.com/CVE-2023-52469/): drivers/amd/pm: fix a use-after-free in kv_parse_power_table (high 7.8)
- [CVE-2023-52468](https://insights.sbomify.com/CVE-2023-52468/): class: fix use-after-free in class_register() (high 7.8)
- [CVE-2023-52467](https://insights.sbomify.com/CVE-2023-52467/): mfd: syscon: Fix null pointer dereference in of_syscon_register() (medium 5.5)
- [CVE-2023-52465](https://insights.sbomify.com/CVE-2023-52465/): power: supply: Fix null pointer dereference in smb2_probe (medium 5.5)
- [CVE-2023-52464](https://insights.sbomify.com/CVE-2023-52464/): EDAC/thunderx: Fix possible out-of-bounds string access (high 7.8)
- [CVE-2023-52463](https://insights.sbomify.com/CVE-2023-52463/): efivarfs: force RO when remounting if SetVariable is not supported (medium 5.5)
- [CVE-2023-52462](https://insights.sbomify.com/CVE-2023-52462/): bpf: fix check for attempt to corrupt spilled pointer (medium 5.5)
- [CVE-2023-52461](https://insights.sbomify.com/CVE-2023-52461/): drm/sched: Fix bounds limiting when given a malformed entity (high 7.8)
- [CVE-2023-52460](https://insights.sbomify.com/CVE-2023-52460/): drm/amd/display: Fix NULL pointer dereference at hibernate (medium 5.5)
- [CVE-2023-5246](https://insights.sbomify.com/CVE-2023-5246/): Auth bypass in FX0-GENT00000 (high 8.8)
- [CVE-2023-52459](https://insights.sbomify.com/CVE-2023-52459/): media: v4l: async: Fix duplicated list deletion (medium 5.5)
- [CVE-2023-52458](https://insights.sbomify.com/CVE-2023-52458/): block: add check that partition length needs to be aligned with block size (medium 5.5)
- [CVE-2023-52457](https://insights.sbomify.com/CVE-2023-52457/): serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed (high 7.8)
- [CVE-2023-52456](https://insights.sbomify.com/CVE-2023-52456/): serial: imx: fix tx statemachine deadlock (medium 5.5)
- [CVE-2023-52455](https://insights.sbomify.com/CVE-2023-52455/): iommu: Don't reserve 0-length IOVA region (high 7.8)
- [CVE-2023-52454](https://insights.sbomify.com/CVE-2023-52454/): nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/160/