| CVE-2024-33056 |
Memory corruption when allocating and accessing an entry in an SMEM partition continuously
|
8.4
High
|
Dec 2, 2024 |
| CVE-2024-33040 |
Memory corruption while invoking redundant release command to release one buffer from user space as race condition can…
|
6.7
Medium
|
Dec 2, 2024 |
| CVE-2024-33039 |
Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not…
|
6.7
Medium
|
Dec 2, 2024 |
| CVE-2024-33037 |
Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC…
|
6.1
Medium
|
Dec 2, 2024 |
| CVE-2024-33036 |
Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory…
|
6.7
Medium
|
Dec 2, 2024 |
| CVE-2024-38424 |
Memory corruption during GNSS HAL process initialization
|
7.8
High
|
Nov 4, 2024 |
| CVE-2024-38423 |
Memory corruption while processing GPU page table switch
|
7.8
High
|
Nov 4, 2024 |
| CVE-2024-38422 |
Memory corruption while processing voice packet with arbitrary data received from ADSP
|
7.8
High
|
Nov 4, 2024 |
| CVE-2024-38421 |
Memory corruption while processing GPU commands
|
7.8
High
|
Nov 4, 2024 |
| CVE-2024-38419 |
Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node
|
7.8
High
|
Nov 4, 2024 |
| CVE-2024-38415 |
Memory corruption while handling session errors from firmware
|
7.8
High
|
Nov 4, 2024 |
| CVE-2024-38408 |
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions
|
8.2
High
|
Nov 4, 2024 |
| CVE-2024-33032 |
Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it
|
6.7
Medium
|
Nov 4, 2024 |
| CVE-2024-43047 |
Exploited
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
|
7.8
High
|
Oct 7, 2024 |
| CVE-2024-33069 |
Transient DOS when transmission of management frame sent by host is not successful and error status is received in the…
|
7.5
High
|
Oct 7, 2024 |
| CVE-2024-23376 |
Memory corruption while sending the persist buffer command packet from the user-space to the kernel space through the…
|
6.7
Medium
|
Oct 7, 2024 |
| CVE-2024-23375 |
Memory corruption during the network scan request
|
6.7
Medium
|
Oct 7, 2024 |
| CVE-2024-23374 |
Memory corruption is possible when an attempt is made from userspace or console to write some haptics effects pattern to…
|
6.7
Medium
|
Oct 7, 2024 |
| CVE-2024-23370 |
Memory corruption when a process invokes IOCTL calls from user-space to create a HAB virtual channel and another process…
|
6.7
Medium
|
Oct 7, 2024 |
| CVE-2024-38402 |
Memory corruption while processing IOCTL call for getting group info
|
7.8
High
|
Sep 2, 2024 |
| CVE-2024-38401 |
Memory corruption while processing concurrent IOCTL calls
|
7.8
High
|
Sep 2, 2024 |
| CVE-2024-33060 |
Memory corruption when two threads try to map and unmap a single node simultaneously
|
8.4
High
|
Sep 2, 2024 |
| CVE-2024-33051 |
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length
|
7.5
High
|
Sep 2, 2024 |
| CVE-2024-33050 |
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing…
|
7.5
High
|
Sep 2, 2024 |
| CVE-2024-33048 |
Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame
|
7.5
High
|
Sep 2, 2024 |