| CVE-2024-38423 |
Memory corruption while processing GPU page table switch
|
7.8
High
|
Nov 4, 2024 |
| CVE-2024-38422 |
Memory corruption while processing voice packet with arbitrary data received from ADSP
|
7.8
High
|
Nov 4, 2024 |
| CVE-2024-38419 |
Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node
|
7.8
High
|
Nov 4, 2024 |
| CVE-2024-33030 |
Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size
|
6.7
Medium
|
Nov 4, 2024 |
| CVE-2024-23374 |
Memory corruption is possible when an attempt is made from userspace or console to write some haptics effects pattern to…
|
6.7
Medium
|
Oct 7, 2024 |
| CVE-2024-23370 |
Memory corruption when a process invokes IOCTL calls from user-space to create a HAB virtual channel and another process…
|
6.7
Medium
|
Oct 7, 2024 |
| CVE-2024-33051 |
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length
|
7.5
High
|
Sep 2, 2024 |
| CVE-2024-33050 |
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing…
|
7.5
High
|
Sep 2, 2024 |
| CVE-2024-33045 |
Memory corruption when BTFM client sends new messages over Slimbus to ADSP
|
8.4
High
|
Sep 2, 2024 |
| CVE-2024-23359 |
Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network
|
8.2
High
|
Sep 2, 2024 |
| CVE-2024-33028 |
Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released
|
8.4
High
|
Aug 5, 2024 |
| CVE-2024-33022 |
Memory corruption while allocating memory in HGSL driver
|
8.4
High
|
Aug 5, 2024 |
| CVE-2024-33021 |
Memory corruption while processing IOCTL call to set metainfo
|
8.4
High
|
Aug 5, 2024 |
| CVE-2024-33014 |
Transient DOS while parsing ESP IE from beacon/probe response frame
|
7.5
High
|
Aug 5, 2024 |
| CVE-2024-33013 |
Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length
|
7.5
High
|
Aug 5, 2024 |
| CVE-2024-33012 |
Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with…
|
7.5
High
|
Aug 5, 2024 |
| CVE-2024-33011 |
Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero
|
7.5
High
|
Aug 5, 2024 |
| CVE-2024-33010 |
Transient DOS while parsing fragments of MBSSID IE from beacon frame
|
7.5
High
|
Aug 5, 2024 |
| CVE-2024-23353 |
Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI
|
7.5
High
|
Aug 5, 2024 |
| CVE-2024-21479 |
Transient DOS during music playback of ALAC content
|
7.5
High
|
Aug 5, 2024 |
| CVE-2024-23368 |
Memory corruption when allocating and accessing an entry in an SMEM partition
|
7.8
High
|
Jul 1, 2024 |
| CVE-2023-43551 |
Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase…
|
9.1
Critical
|
Jun 3, 2024 |
| CVE-2023-43524 |
Memory corruption when the bandpass filter order received from AHAL is not within the expected range
|
6.7
Medium
|
May 6, 2024 |
| CVE-2024-21468 |
Memory corruption when there is failed unmap operation in GPU
|
8.4
High
|
Apr 1, 2024 |
| CVE-2023-33066 |
Memory corruption in Audio while processing RT proxy port register driver
|
8.4
High
|
Mar 4, 2024 |