| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request. |
| Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE. |
| Memory corruption while processing multiple simultaneous escape calls. |
| Memory corruption while processing buffer initialization, when trusted report for certain report types are generated. |
| Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame. |
| Memory Corruption in Modem due to double free while parsing the PKCS15 sim files. |
| Transient DOS while processing TIM IE from beacon frame as there is no check for IE length. |
| Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network. |
| Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point. |
| Information disclosure in WLAN HAL while handling the WMI state info command. |
| Memory corruption while operating the mailbox in Automotive. |
| Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command. |
| Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command. |
| Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size. |
| Memory corruption when resource manager sends the host kernel a reply message with multiple fragments. |
| Information disclosure in WLAN HAL while handling command through WMI interfaces. |
| Memory corruption in Audio when memory map command is executed consecutively in ADSP. |
| Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware. |
| Memory corruption in Graphics Driver when destroying a context with KGSL_GPU_AUX_COMMAND_TIMELINE objects queued. |
| Transient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element. |
