| CVE-2024-43052 |
Memory corruption while processing API calls to NPU with invalid input
|
7.8
High
|
Dec 2, 2024 |
| CVE-2024-33056 |
Memory corruption when allocating and accessing an entry in an SMEM partition continuously
|
8.4
High
|
Dec 2, 2024 |
| CVE-2024-33053 |
Memory corruption when multiple threads try to unregister the CVP buffer at the same time
|
6.7
Medium
|
Dec 2, 2024 |
| CVE-2024-33044 |
Memory corruption while Configuring the SMR/S2CR register in Bypass mode
|
8.4
High
|
Dec 2, 2024 |
| CVE-2024-33037 |
Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC…
|
6.1
Medium
|
Dec 2, 2024 |
| CVE-2024-33036 |
Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory…
|
6.7
Medium
|
Dec 2, 2024 |
| CVE-2024-38423 |
Memory corruption while processing GPU page table switch
|
7.8
High
|
Nov 4, 2024 |
| CVE-2024-38422 |
Memory corruption while processing voice packet with arbitrary data received from ADSP
|
7.8
High
|
Nov 4, 2024 |
| CVE-2024-38415 |
Memory corruption while handling session errors from firmware
|
7.8
High
|
Nov 4, 2024 |
| CVE-2024-38408 |
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions
|
8.2
High
|
Nov 4, 2024 |
| CVE-2024-33032 |
Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it
|
6.7
Medium
|
Nov 4, 2024 |
| CVE-2024-33051 |
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length
|
7.5
High
|
Sep 2, 2024 |
| CVE-2024-33016 |
memory corruption when an invalid firehose patch command is invoked
|
6.8
Medium
|
Sep 2, 2024 |
| CVE-2024-23364 |
Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information…
|
7.5
High
|
Sep 2, 2024 |
| CVE-2024-21469 |
Memory corruption when an invoke call and a TEE call are bound for the same trusted application
|
7.3
High
|
Jul 1, 2024 |
| CVE-2024-21461 |
Memory corruption while performing finish HMAC operation when context is freed by keymaster
|
8.4
High
|
Jul 1, 2024 |
| CVE-2024-21476 |
Memory corruption when the channel ID passed by user is not validated and further used
|
7.8
High
|
May 6, 2024 |
| CVE-2024-21468 |
Memory corruption when there is failed unmap operation in GPU
|
8.4
High
|
Apr 1, 2024 |
| CVE-2023-33023 |
Memory corruption while processing finish_sign command to pass a rsp buffer
|
8.4
High
|
Apr 1, 2024 |
| CVE-2023-28547 |
Memory corruption in SPS Application while requesting for public key in sorter TA
|
8.4
High
|
Apr 1, 2024 |
| CVE-2023-33066 |
Memory corruption in Audio while processing RT proxy port register driver
|
8.4
High
|
Mar 4, 2024 |
| CVE-2023-28578 |
Memory corruption in Core Services while executing the command for removing a single event listener
|
9.3
Critical
|
Mar 4, 2024 |
| CVE-2023-43522 |
Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL
|
7.5
High
|
Feb 6, 2024 |
| CVE-2023-33107 |
Exploited
Qualcomm Multiple Chipsets Integer Overflow Vulnerability
|
8.4
High
|
Dec 5, 2023 |
| CVE-2023-33063 |
Exploited
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
|
7.8
High
|
Dec 5, 2023 |