| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVCS_LOAD_MODULE command. |
| Memory corruption while parsing qcp clip with invalid chunk data size. |
| Transient DOS when processing a NULL buffer while parsing WLAN vdev. |
| Memory Corruption in Audio while allocating the ion buffer during the music playback. |
| Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location. |
| Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length. |
| Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command. |
| Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received. |
| Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message. |
| Memory corruption while invoking IOCTLs calls in Automotive Multimedia. |
| Memory corruption while invoking HGSL IOCTL context create. |
| Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR. |
| Transient DOS while processing DL NAS TRANSPORT message with payload length 0. |
| Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size. |
| Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE. |
| Transient DOS while parsing WPA IES, when it is passed with length more than expected size. |
| Memory corruption when the payload received from firmware is not as per the expected protocol size. |
| Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL. |
| Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level. |
| Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16. |
