| CVE-2024-43052 |
Memory corruption while processing API calls to NPU with invalid input
|
7.8
High
|
Dec 2, 2024 |
| CVE-2021-30299 |
Possible out of bound access in audio module due to lack of validation of user provided input
|
6.7
Medium
|
Nov 22, 2024 |
| CVE-2024-38423 |
Memory corruption while processing GPU page table switch
|
7.8
High
|
Nov 4, 2024 |
| CVE-2024-38422 |
Memory corruption while processing voice packet with arbitrary data received from ADSP
|
7.8
High
|
Nov 4, 2024 |
| CVE-2024-38403 |
Transient DOS while parsing BTM ML IE when per STA profile is not included
|
7.5
High
|
Nov 4, 2024 |
| CVE-2024-33032 |
Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it
|
6.7
Medium
|
Nov 4, 2024 |
| CVE-2024-23385 |
Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE
|
7.5
High
|
Nov 4, 2024 |
| CVE-2024-33052 |
Memory corruption when user provides data for FM HCI command control operations
|
7.8
High
|
Sep 2, 2024 |
| CVE-2024-33051 |
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length
|
7.5
High
|
Sep 2, 2024 |
| CVE-2024-33042 |
Memory corruption when Alternative Frequency offset value is set to 255
|
7.8
High
|
Sep 2, 2024 |
| CVE-2024-33016 |
memory corruption when an invalid firehose patch command is invoked
|
6.8
Medium
|
Sep 2, 2024 |
| CVE-2024-23364 |
Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information…
|
7.5
High
|
Sep 2, 2024 |
| CVE-2024-23359 |
Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network
|
8.2
High
|
Sep 2, 2024 |
| CVE-2024-23358 |
Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem
|
7.5
High
|
Sep 2, 2024 |
| CVE-2024-33027 |
Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by…
|
8.4
High
|
Aug 5, 2024 |
| CVE-2024-23353 |
Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI
|
7.5
High
|
Aug 5, 2024 |
| CVE-2024-21479 |
Transient DOS during music playback of ALAC content
|
7.5
High
|
Aug 5, 2024 |
| CVE-2024-23373 |
Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released
|
8.4
High
|
Jul 1, 2024 |
| CVE-2024-23368 |
Memory corruption when allocating and accessing an entry in an SMEM partition
|
7.8
High
|
Jul 1, 2024 |
| CVE-2024-21461 |
Memory corruption while performing finish HMAC operation when context is freed by keymaster
|
8.4
High
|
Jul 1, 2024 |
| CVE-2023-43555 |
Information disclosure in Video while parsing mp2 clip with invalid section length
|
8.2
High
|
Jun 3, 2024 |
| CVE-2023-43527 |
Information disclosure while parsing dts header atom in Video
|
6.8
Medium
|
May 6, 2024 |
| CVE-2023-43521 |
Memory corruption when multiple listeners are being registered with the same file descriptor
|
6.7
Medium
|
May 6, 2024 |
| CVE-2024-21468 |
Memory corruption when there is failed unmap operation in GPU
|
8.4
High
|
Apr 1, 2024 |
| CVE-2023-33023 |
Memory corruption while processing finish_sign command to pass a rsp buffer
|
8.4
High
|
Apr 1, 2024 |