| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Memory Corruption in WLAN HOST while fetching TX status information. |
| Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header. |
| Memory corruption while processing a QMI request for allocating memory from a DHMS supported subsystem. |
| Memory corruption in TZ Secure OS while loading an app ELF. |
| Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point. |
| Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command. |
| Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers. |
| Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level. |
| Memory Corruption in Audio while allocating the ion buffer during the music playback. |
| Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network. |
| Memory corruption while processing buffer initialization, when trusted report for certain report types are generated. |
| Memory corruption when processing cmd parameters while parsing vdev. |
| Information Disclosure in data Modem while parsing an FMTP line in an SDP message. |
| Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element. |
| Memory Corruption in Data Modem while processing DMA buffer release event about CFR data. |
| Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location. |
| Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host. |
| Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL. |
| Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption. |
| Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points. |
