| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage. |
| Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver. |
| Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length. |
| Memory corruption while processing a QMI request for allocating memory from a DHMS supported subsystem. |
| Memory corruption in Audio when memory map command is executed consecutively in ADSP. |
| Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL. |
| Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size. |
| Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time. |
| Memory corruption while processing buffer initialization, when trusted report for certain report types are generated. |
| Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL. |
| Memory corruption when resource manager sends the host kernel a reply message with multiple fragments. |
| Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network. |
| Transient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element. |
| Memory corruption when multiple listeners are being registered with the same file descriptor. |
| Information disclosure while handling T2LM Action Frame in WLAN Host. |
| Transient DOS while parsing WPA IES, when it is passed with length more than expected size. |
| Transient DOS while processing PDU Release command with a parameter PDU ID out of range. |
| Memory corruption during management frame processing due to mismatch in T2LM info element. |
| Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location. |
| Memory corruption when processing cmd parameters while parsing vdev. |
