| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Transient DOS while parsing per STA profile in ML IE. |
| Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points. |
| Memory corruption while processing a QMI request for allocating memory from a DHMS supported subsystem. |
| Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header. |
| Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element. |
| Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP. |
| Memory corruption in video while parsing invalid mp2 clip. |
| Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size. |
| Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command. |
| Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper. |
| Transient DOS while processing TIM IE from beacon frame as there is no check for IE length. |
| Memory corruption when user provides data for FM HCI command control operations. |
| Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location. |
| Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests. |
| Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver. |
| Transient DOS while parsing probe response and assoc response frame. |
| Memory Corruption in Data Modem while making a MO call or MT VOLTE call. |
| Memory corruption while processing concurrent IOCTL calls. |
| Memory corruption while processing IOCTL call for getting group info. |
| Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption. |
