| CVE-2023-28577 |
In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used
|
6.7
Medium
|
Aug 8, 2023 |
| CVE-2023-28555 |
Transient DOS in Audio while remapping channel buffer in media codec decoding
|
7.5
High
|
Aug 8, 2023 |
| CVE-2023-21652 |
Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use
|
7.7
High
|
Aug 8, 2023 |
| CVE-2023-21651 |
Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE
|
9.3
Critical
|
Aug 8, 2023 |
| CVE-2023-21649 |
Memory corruption in WLAN while running doDriverCmd for an unspecific command
|
6.7
Medium
|
Aug 8, 2023 |
| CVE-2022-40510 |
Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder
|
9.8
Critical
|
Aug 8, 2023 |
| CVE-2023-28542 |
Memory Corruption in WLAN HOST while fetching TX status information
|
7.8
High
|
Jul 4, 2023 |
| CVE-2023-28541 |
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data
|
7.8
High
|
Jul 4, 2023 |
| CVE-2023-22386 |
Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory
|
7.8
High
|
Jul 4, 2023 |
| CVE-2023-21639 |
Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client
|
6.7
Medium
|
Jul 4, 2023 |
| CVE-2023-21638 |
Memory corruption in Video while calling APIs with different instance ID than the one received in initialization
|
6.7
Medium
|
Jul 4, 2023 |
| CVE-2023-21635 |
Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony
|
6.7
Medium
|
Jul 4, 2023 |
| CVE-2023-21633 |
Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request
|
6.7
Medium
|
Jul 4, 2023 |
| CVE-2023-21629 |
Memory Corruption in Modem due to double free while parsing the PKCS15 sim files
|
6.8
Medium
|
Jul 4, 2023 |
| CVE-2023-21669 |
Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address
|
8.2
High
|
Jun 6, 2023 |
| CVE-2023-21660 |
Transient DOS in WLAN Firmware while parsing FT Information Elements
|
7.5
High
|
Jun 6, 2023 |
| CVE-2023-21657 |
Memoru corruption in Audio when ADSP sends input during record use case
|
7.8
High
|
Jun 6, 2023 |
| CVE-2022-40536 |
Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network
|
7.5
High
|
Jun 6, 2023 |
| CVE-2022-40533 |
Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request
|
6.2
Medium
|
Jun 6, 2023 |
| CVE-2022-40522 |
Memory corruption in Linux Networking due to double free while handling a hyp-assign
|
8.4
High
|
Jun 6, 2023 |
| CVE-2022-33307 |
Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed
|
8.4
High
|
Jun 6, 2023 |
| CVE-2022-33267 |
Memory corruption in Linux while sending DRM request
|
6.7
Medium
|
Jun 6, 2023 |
| CVE-2022-33264 |
Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message
|
7.9
High
|
Jun 6, 2023 |
| CVE-2022-33230 |
Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host
|
6.7
Medium
|
Jun 6, 2023 |
| CVE-2022-33227 |
Memory corruption in Linux android due to double free while calling unregister provider after register call
|
6.7
Medium
|
Jun 6, 2023 |