| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time. |
| Memory corruption while invoking callback function of AFE from ADSP. |
| Memory corruption while playing audio file having large-sized input buffer. |
| Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper. |
| Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE. |
| Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command. |
| Memory corruption while processing a QMI request for allocating memory from a DHMS supported subsystem. |
| Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size. |
| Memory corruption during management frame processing due to mismatch in T2LM info element. |
| Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame. |
| Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers. |
| Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point. |
| Memory corruption in Audio while processing the calibration data returned from ACDB loader. |
| Transient DOS when processing a NULL buffer while parsing WLAN vdev. |
| Cryptographic issue in HLOS during key management. |
| Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame. |
| Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element. |
| Transient DOS in WLAN Firmware while parsing a BTM request. |
| Information disclosure in Audio while accessing AVCS services from ADSP payload. |
| Memory corruption when resource manager sends the host kernel a reply message with multiple fragments. |
