| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR. |
| Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVCS_LOAD_MODULE command. |
| Memory corruption in HLOS while checking for the storage type. |
| Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network. |
| Transient DOS while processing DL NAS TRANSPORT message with payload length 0. |
| Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location. |
| Memory corruption when BTFM client sends new messages over Slimbus to ADSP. |
| Memory corruption while using the UIM diag command to get the operators name. |
| Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware. |
| Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager. |
| Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time. |
| Memory corruption in Audio while processing IIR config data from AFE calibration block. |
| Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked. |
| Memory corruption in Audio while processing the calibration data returned from ACDB loader. |
| Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command. |
| Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size. |
| Information disclosure in Video while parsing mp2 clip with invalid section length. |
| Memory corruption while processing buffer initialization, when trusted report for certain report types are generated. |
| Memory Corruption in WLAN HOST while parsing QMI response message from firmware. |
| Memory corruption in Audio while processing RT proxy port register driver. |
