| CVE-2024-33045 |
Memory corruption when BTFM client sends new messages over Slimbus to ADSP
|
8.4
High
|
Sep 2, 2024 |
| CVE-2024-33042 |
Memory corruption when Alternative Frequency offset value is set to 255
|
7.8
High
|
Sep 2, 2024 |
| CVE-2024-33038 |
Memory corruption while passing untrusted/corrupted pointers from DSP to EVA
|
7.8
High
|
Sep 2, 2024 |
| CVE-2024-33035 |
Memory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients
|
8.4
High
|
Sep 2, 2024 |
| CVE-2024-33016 |
memory corruption when an invalid firehose patch command is invoked
|
6.8
Medium
|
Sep 2, 2024 |
| CVE-2024-23364 |
Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information…
|
7.5
High
|
Sep 2, 2024 |
| CVE-2024-23362 |
Cryptographic issue while parsing RSA keys in COBR format
|
7.1
High
|
Sep 2, 2024 |
| CVE-2024-23359 |
Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network
|
8.2
High
|
Sep 2, 2024 |
| CVE-2024-33034 |
Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and…
|
8.4
High
|
Aug 5, 2024 |
| CVE-2024-33028 |
Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released
|
8.4
High
|
Aug 5, 2024 |
| CVE-2024-33027 |
Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by…
|
8.4
High
|
Aug 5, 2024 |
| CVE-2024-33023 |
Memory corruption while creating a fence to wait on timeline events, and simultaneously signal timeline events
|
8.4
High
|
Aug 5, 2024 |
| CVE-2024-33022 |
Memory corruption while allocating memory in HGSL driver
|
8.4
High
|
Aug 5, 2024 |
| CVE-2024-33021 |
Memory corruption while processing IOCTL call to set metainfo
|
8.4
High
|
Aug 5, 2024 |
| CVE-2024-33015 |
Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is…
|
7.5
High
|
Aug 5, 2024 |
| CVE-2024-33014 |
Transient DOS while parsing ESP IE from beacon/probe response frame
|
7.5
High
|
Aug 5, 2024 |
| CVE-2024-33012 |
Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with…
|
7.5
High
|
Aug 5, 2024 |
| CVE-2024-33011 |
Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero
|
7.5
High
|
Aug 5, 2024 |
| CVE-2024-33010 |
Transient DOS while parsing fragments of MBSSID IE from beacon frame
|
7.5
High
|
Aug 5, 2024 |
| CVE-2024-23384 |
Use After Free in Graphics Linux
|
8.4
High
|
Aug 5, 2024 |
| CVE-2024-23383 |
Memory corruption when kernel driver attempts to trigger hardware fences
|
8.4
High
|
Aug 5, 2024 |
| CVE-2024-23382 |
Memory corruption while processing graphics kernel driver request to create DMA fence
|
8.4
High
|
Aug 5, 2024 |
| CVE-2024-23381 |
Memory corruption when memory mapped in a VBO is not unmapped by the GPU SMMU
|
8.4
High
|
Aug 5, 2024 |
| CVE-2024-23356 |
Memory corruption during session sign renewal request calls in HLOS
|
7.8
High
|
Aug 5, 2024 |
| CVE-2024-23355 |
Memory corruption when keymaster operation imports a shared key
|
7.8
High
|
Aug 5, 2024 |