| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL. |
| Information disclosure while deriving keys for a session for any Widevine use case. |
| Memory corruption while invoking IOCTL calls to unmap the DMA buffers. |
| Memory corruption in HLOS while checking for the storage type. |
| Memory corruption when there is failed unmap operation in GPU. |
| Memory corruption when IOMMU unmap of a GPU buffer fails in Linux. |
| Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request. |
| Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header. |
| Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length. |
| Memory corruption while processing a QMI request for allocating memory from a DHMS supported subsystem. |
| Memory corruption while processing buffer initialization, when trusted report for certain report types are generated. |
| Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time. |
| Memory corruption while processing manipulated payload in video firmware. |
| Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size. |
| Memory corruption when resource manager sends the host kernel a reply message with multiple fragments. |
| Transient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element. |
| Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVCS_LOAD_MODULE command. |
| Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL. |
| Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command. |
| Memory corruption in Graphics Driver when destroying a context with KGSL_GPU_AUX_COMMAND_TIMELINE objects queued. |
