| CVE-2024-33056 |
Memory corruption when allocating and accessing an entry in an SMEM partition continuously
|
8.4
High
|
Dec 2, 2024 |
| CVE-2024-38423 |
Memory corruption while processing GPU page table switch
|
7.8
High
|
Nov 4, 2024 |
| CVE-2024-38422 |
Memory corruption while processing voice packet with arbitrary data received from ADSP
|
7.8
High
|
Nov 4, 2024 |
| CVE-2024-23379 |
Memory corruption while unmapping the fastrpc map when two threads can free the same map in concurrent scenario
|
6.7
Medium
|
Oct 7, 2024 |
| CVE-2024-33060 |
Memory corruption when two threads try to map and unmap a single node simultaneously
|
8.4
High
|
Sep 2, 2024 |
| CVE-2024-33052 |
Memory corruption when user provides data for FM HCI command control operations
|
7.8
High
|
Sep 2, 2024 |
| CVE-2024-33051 |
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length
|
7.5
High
|
Sep 2, 2024 |
| CVE-2024-33048 |
Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame
|
7.5
High
|
Sep 2, 2024 |
| CVE-2024-33045 |
Memory corruption when BTFM client sends new messages over Slimbus to ADSP
|
8.4
High
|
Sep 2, 2024 |
| CVE-2024-33042 |
Memory corruption when Alternative Frequency offset value is set to 255
|
7.8
High
|
Sep 2, 2024 |
| CVE-2024-33016 |
memory corruption when an invalid firehose patch command is invoked
|
6.8
Medium
|
Sep 2, 2024 |
| CVE-2024-23362 |
Cryptographic issue while parsing RSA keys in COBR format
|
7.1
High
|
Sep 2, 2024 |
| CVE-2024-33014 |
Transient DOS while parsing ESP IE from beacon/probe response frame
|
7.5
High
|
Aug 5, 2024 |
| CVE-2024-23353 |
Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI
|
7.5
High
|
Aug 5, 2024 |
| CVE-2024-21479 |
Transient DOS during music playback of ALAC content
|
7.5
High
|
Aug 5, 2024 |
| CVE-2024-23380 |
Memory corruption while handling user packets during VBO bind operation
|
8.4
High
|
Jul 1, 2024 |
| CVE-2024-23373 |
Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released
|
8.4
High
|
Jul 1, 2024 |
| CVE-2024-23368 |
Memory corruption when allocating and accessing an entry in an SMEM partition
|
7.8
High
|
Jul 1, 2024 |
| CVE-2024-21461 |
Memory corruption while performing finish HMAC operation when context is freed by keymaster
|
8.4
High
|
Jul 1, 2024 |
| CVE-2024-21468 |
Memory corruption when there is failed unmap operation in GPU
|
8.4
High
|
Apr 1, 2024 |
| CVE-2023-33023 |
Memory corruption while processing finish_sign command to pass a rsp buffer
|
8.4
High
|
Apr 1, 2024 |
| CVE-2023-28547 |
Memory corruption in SPS Application while requesting for public key in sorter TA
|
8.4
High
|
Apr 1, 2024 |
| CVE-2023-43548 |
Memory corruption while parsing qcp clip with invalid chunk data size
|
7.3
High
|
Mar 4, 2024 |
| CVE-2023-28578 |
Memory corruption in Core Services while executing the command for removing a single event listener
|
9.3
Critical
|
Mar 4, 2024 |
| CVE-2023-43519 |
Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size
|
7.3
High
|
Feb 6, 2024 |