| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters. |
| u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8053, IPQ4019, IPQ8064, MSM8909W, MSM8996AU, QCA9531, QCN5502, QCS405, SDX20, SM6150, SM7150 |
| Memory corruption while processing a crafted ELF file in the Primary Bootloader. |
| Exposed dangerous function lead to privilege escalation via gRPC server. |
| Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations. |
| Privilege escalation due to weak configuration during package extraction process. |
| Improper authorization leads to Remote Code Execution via SocketIO interface. |
| Privilege escalation due to weak configuration while temporary file handling. |
| Transient DOS when processing authentication frames with invalid FILS information element header lengths. |
| Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions. |
| Memory Corruption when copying large input data exceeds normal allocation limits. |
| Memory corruption when processing decode statistics due to insufficient validation of offset against structure size. |
| Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations. |
| Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled. |
| Memory corruption while processing rear sensor IOCTL calls. |
| Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying. |
| Transient DOS while parsing frame during channel usage. |
| Memory Corruption when validating large data buffers from external sources using addition to check buffer length. |
| Information Disclosure when a pointer is reused after being deallocated. |
| Memory Corruption when copying unverified data from an external source exceeds the allocated buffer size. |
