| CVE-2024-23359 |
Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network
|
8.2
Élevée
|
2 sept. 2024 |
| CVE-2024-23358 |
Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem
|
7.5
Élevée
|
2 sept. 2024 |
| CVE-2024-33028 |
Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released
|
8.4
Élevée
|
5 août 2024 |
| CVE-2024-33026 |
Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size…
|
7.5
Élevée
|
5 août 2024 |
| CVE-2024-33024 |
Transient DOS while parsing the ML IE when a beacon with length field inside the common info of ML IE greater than the…
|
7.5
Élevée
|
5 août 2024 |
| CVE-2024-33022 |
Memory corruption while allocating memory in HGSL driver
|
8.4
Élevée
|
5 août 2024 |
| CVE-2024-33021 |
Memory corruption while processing IOCTL call to set metainfo
|
8.4
Élevée
|
5 août 2024 |
| CVE-2024-33020 |
Transient DOS while processing TID-to-link mapping IE elements
|
7.5
Élevée
|
5 août 2024 |
| CVE-2024-33019 |
Transient DOS while parsing the received TID-to-link mapping action frame
|
7.5
Élevée
|
5 août 2024 |
| CVE-2024-33018 |
Transient DOS while parsing the received TID-to-link mapping element of the TID-to-link mapping action frame
|
7.5
Élevée
|
5 août 2024 |
| CVE-2024-33015 |
Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is…
|
7.5
Élevée
|
5 août 2024 |
| CVE-2024-33014 |
Transient DOS while parsing ESP IE from beacon/probe response frame
|
7.5
Élevée
|
5 août 2024 |
| CVE-2024-33013 |
Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length
|
7.5
Élevée
|
5 août 2024 |
| CVE-2024-33012 |
Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with…
|
7.5
Élevée
|
5 août 2024 |
| CVE-2024-33011 |
Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero
|
7.5
Élevée
|
5 août 2024 |
| CVE-2024-33010 |
Transient DOS while parsing fragments of MBSSID IE from beacon frame
|
7.5
Élevée
|
5 août 2024 |
| CVE-2024-23356 |
Memory corruption during session sign renewal request calls in HLOS
|
7.8
Élevée
|
5 août 2024 |
| CVE-2024-23355 |
Memory corruption when keymaster operation imports a shared key
|
7.8
Élevée
|
5 août 2024 |
| CVE-2024-23353 |
Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI
|
7.5
Élevée
|
5 août 2024 |
| CVE-2024-23352 |
Transient DOS when NAS receives ODAC criteria of length 1 and type 1 in registration accept OTA
|
7.5
Élevée
|
5 août 2024 |
| CVE-2024-23350 |
Permanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR container whose…
|
6.5
Moyenne
|
5 août 2024 |
| CVE-2024-21481 |
Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager
|
8.4
Élevée
|
5 août 2024 |
| CVE-2024-21479 |
Transient DOS during music playback of ALAC content
|
7.5
Élevée
|
5 août 2024 |
| CVE-2024-21459 |
Information disclosure while handling beacon or probe response frame in STA
|
6.5
Moyenne
|
5 août 2024 |
| CVE-2024-23368 |
Memory corruption when allocating and accessing an entry in an SMEM partition
|
7.8
Élevée
|
1 juil. 2024 |