| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache. |
| Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network. |
| Transient DOS while processing TIM IE from beacon frame as there is no check for IE length. |
| Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked. |
| Cryptographic issue occurs due to use of insecure connection method while downloading. |
| Memory corruption while playing audio file having large-sized input buffer. |
| Memory Corruption in Modem due to double free while parsing the PKCS15 sim files. |
| Transient DOS while parse fils IE with length equal to 1. |
| Information disclosure while handling T2LM Action Frame in WLAN Host. |
| Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame. |
| Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command. |
| Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame. |
| Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element. |
| Memory corruption in HLOS while converting from authorization token to HIDL vector. |
| Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size. |
| Memory Corruption in Audio while allocating the ion buffer during the music playback. |
| Transient DOS may occur while processing the country IE. |
| Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests. |
| Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received. |
| Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL. |