| CVE-2024-33033 |
Memory corruption while processing IOCTL calls to unmap the buffers
|
6.7
Medium
|
Nov 4, 2024 |
| CVE-2024-33032 |
Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it
|
6.7
Medium
|
Nov 4, 2024 |
| CVE-2024-33030 |
Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size
|
6.7
Medium
|
Nov 4, 2024 |
| CVE-2024-23386 |
memory corruption when WiFi display APIs are invoked with large random inputs
|
6.7
Medium
|
Nov 4, 2024 |
| CVE-2024-23385 |
Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE
|
7.5
High
|
Nov 4, 2024 |
| CVE-2024-23377 |
Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the…
|
6.7
Medium
|
Nov 4, 2024 |
| CVE-2024-43047 |
Exploited
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
|
7.8
High
|
Oct 7, 2024 |
| CVE-2024-38399 |
Memory corruption while processing user packets to generate page faults
|
8.4
High
|
Oct 7, 2024 |
| CVE-2024-38397 |
Transient DOS while parsing probe response and assoc response frame
|
7.5
High
|
Oct 7, 2024 |
| CVE-2024-33073 |
Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE
|
8.2
High
|
Oct 7, 2024 |
| CVE-2024-33069 |
Transient DOS when transmission of management frame sent by host is not successful and error status is received in the…
|
7.5
High
|
Oct 7, 2024 |
| CVE-2024-33065 |
Memory corruption while taking snapshot when an offset variable is set by camera driver
|
8.4
High
|
Oct 7, 2024 |
| CVE-2024-23379 |
Memory corruption while unmapping the fastrpc map when two threads can free the same map in concurrent scenario
|
6.7
Medium
|
Oct 7, 2024 |
| CVE-2024-23376 |
Memory corruption while sending the persist buffer command packet from the user-space to the kernel space through the…
|
6.7
Medium
|
Oct 7, 2024 |
| CVE-2024-23374 |
Memory corruption is possible when an attempt is made from userspace or console to write some haptics effects pattern to…
|
6.7
Medium
|
Oct 7, 2024 |
| CVE-2024-23369 |
Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers
|
7.8
High
|
Oct 7, 2024 |
| CVE-2024-38402 |
Memory corruption while processing IOCTL call for getting group info
|
7.8
High
|
Sep 2, 2024 |
| CVE-2024-33060 |
Memory corruption when two threads try to map and unmap a single node simultaneously
|
8.4
High
|
Sep 2, 2024 |
| CVE-2024-33057 |
Transient DOS while parsing the multi-link element Control field when common information length check is missing…
|
7.5
High
|
Sep 2, 2024 |
| CVE-2024-33054 |
Memory corruption during the handshake between the Primary Virtual Machine and Trusted Virtual Machine
|
7.8
High
|
Sep 2, 2024 |
| CVE-2024-33052 |
Memory corruption when user provides data for FM HCI command control operations
|
7.8
High
|
Sep 2, 2024 |
| CVE-2024-33051 |
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length
|
7.5
High
|
Sep 2, 2024 |
| CVE-2024-33050 |
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing…
|
7.5
High
|
Sep 2, 2024 |
| CVE-2024-33048 |
Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame
|
7.5
High
|
Sep 2, 2024 |
| CVE-2024-33047 |
Memory corruption when the captureRead QDCM command is invoked from user-space
|
8.4
High
|
Sep 2, 2024 |