| CVE-2024-33056 |
Memory corruption when allocating and accessing an entry in an SMEM partition continuously
|
8.4
High
|
Dec 2, 2024 |
| CVE-2024-33051 |
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length
|
7.5
High
|
Sep 2, 2024 |
| CVE-2024-33016 |
memory corruption when an invalid firehose patch command is invoked
|
6.8
Medium
|
Sep 2, 2024 |
| CVE-2024-23362 |
Cryptographic issue while parsing RSA keys in COBR format
|
7.1
High
|
Sep 2, 2024 |
| CVE-2024-21469 |
Memory corruption when an invoke call and a TEE call are bound for the same trusted application
|
7.3
High
|
Jul 1, 2024 |
| CVE-2024-21465 |
Memory corruption while processing key blob passed by the user
|
7.8
High
|
Jul 1, 2024 |
| CVE-2024-21461 |
Memory corruption while performing finish HMAC operation when context is freed by keymaster
|
8.4
High
|
Jul 1, 2024 |
| CVE-2023-43542 |
Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked
|
7.8
High
|
Jun 3, 2024 |
| CVE-2023-33023 |
Memory corruption while processing finish_sign command to pass a rsp buffer
|
8.4
High
|
Apr 1, 2024 |
| CVE-2023-28547 |
Memory corruption in SPS Application while requesting for public key in sorter TA
|
8.4
High
|
Apr 1, 2024 |
| CVE-2023-28578 |
Memory corruption in Core Services while executing the command for removing a single event listener
|
9.3
Critical
|
Mar 4, 2024 |
| CVE-2023-43522 |
Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL
|
7.5
High
|
Feb 6, 2024 |
| CVE-2023-33027 |
Transient DOS in WLAN Firmware while parsing rsn ies
|
7.5
High
|
Oct 3, 2023 |
| CVE-2023-24847 |
Transient DOS in Modem while allocating DSM items
|
7.5
High
|
Oct 3, 2023 |
| CVE-2023-28558 |
Memory corruption in WLAN handler while processing PhyID in Tx status handler
|
7.8
High
|
Sep 5, 2023 |
| CVE-2023-21652 |
Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use
|
7.7
High
|
Aug 8, 2023 |
| CVE-2023-21651 |
Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE
|
9.3
Critical
|
Aug 8, 2023 |
| CVE-2022-40510 |
Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder
|
9.8
Critical
|
Aug 8, 2023 |
| CVE-2023-21629 |
Memory Corruption in Modem due to double free while parsing the PKCS15 sim files
|
6.8
Medium
|
Jul 4, 2023 |
| CVE-2022-40533 |
Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request
|
6.2
Medium
|
Jun 6, 2023 |
| CVE-2022-33264 |
Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message
|
7.9
High
|
Jun 6, 2023 |
| CVE-2022-33289 |
Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card
|
6.8
Medium
|
Apr 4, 2023 |
| CVE-2022-40535 |
Transient DOS due to buffer over-read in WLAN while sending a packet to device
|
7.5
High
|
Mar 7, 2023 |
| CVE-2022-40515 |
Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms
|
7.3
High
|
Mar 7, 2023 |
| CVE-2022-33278 |
Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than…
|
7.8
High
|
Mar 7, 2023 |