| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Memory corruption when user provides data for FM HCI command control operations. |
| Transient DOS may occur while processing the country IE. |
| Memory corruption while processing buffer initialization, when trusted report for certain report types are generated. |
| Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR. |
| Transient DOS while processing TIM IE from beacon frame as there is no check for IE length. |
| Memory corruption when two threads try to map and unmap a single node simultaneously. |
| Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE. |
| Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network. |
| Memory corruption when Alternative Frequency offset value is set to 255. |
| Memory corruption in HLOS while converting from authorization token to HIDL vector. |
| Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command. |
| Transient DOS while parsing WPA IES, when it is passed with length more than expected size. |
| Information disclosure in Video while parsing mp2 clip with invalid section length. |
| Memory corruption in Audio while running invalid audio recording from ADSP. |
| Memory corruption when there is failed unmap operation in GPU. |
| Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element. |
| Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests. |
| Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver. |
| Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers. |
| Transient DOS while processing 11AZ RTT management action frame received through OTA. |
