| CVE-2024-43050 |
Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver
|
7.8
Élevée
|
2 déc. 2024 |
| CVE-2024-38408 |
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions
|
8.2
Élevée
|
4 nov. 2024 |
| CVE-2024-33051 |
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length
|
7.5
Élevée
|
2 sept. 2024 |
| CVE-2024-33016 |
memory corruption when an invalid firehose patch command is invoked
|
6.8
Moyenne
|
2 sept. 2024 |
| CVE-2024-23362 |
Cryptographic issue while parsing RSA keys in COBR format
|
7.1
Élevée
|
2 sept. 2024 |
| CVE-2024-23356 |
Memory corruption during session sign renewal request calls in HLOS
|
7.8
Élevée
|
5 août 2024 |
| CVE-2024-21469 |
Memory corruption when an invoke call and a TEE call are bound for the same trusted application
|
7.3
Élevée
|
1 juil. 2024 |
| CVE-2024-21465 |
Memory corruption while processing key blob passed by the user
|
7.8
Élevée
|
1 juil. 2024 |
| CVE-2024-21461 |
Memory corruption while performing finish HMAC operation when context is freed by keymaster
|
8.4
Élevée
|
1 juil. 2024 |
| CVE-2023-43542 |
Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked
|
7.8
Élevée
|
3 juin 2024 |
| CVE-2023-33023 |
Memory corruption while processing finish_sign command to pass a rsp buffer
|
8.4
Élevée
|
1 avr. 2024 |
| CVE-2023-28547 |
Memory corruption in SPS Application while requesting for public key in sorter TA
|
8.4
Élevée
|
1 avr. 2024 |
| CVE-2023-43548 |
Memory corruption while parsing qcp clip with invalid chunk data size
|
7.3
Élevée
|
4 mars 2024 |
| CVE-2023-43519 |
Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size
|
7.3
Élevée
|
6 févr. 2024 |
| CVE-2023-43518 |
Memory corruption in video while parsing invalid mp2 clip
|
7.3
Élevée
|
6 févr. 2024 |
| CVE-2023-43512 |
Transient DOS while parsing GATT service data when the total amount of memory that is required by the multiple…
|
7.5
Élevée
|
2 janv. 2024 |
| CVE-2023-33027 |
Transient DOS in WLAN Firmware while parsing rsn ies
|
7.5
Élevée
|
3 oct. 2023 |
| CVE-2023-24847 |
Transient DOS in Modem while allocating DSM items
|
7.5
Élevée
|
3 oct. 2023 |
| CVE-2023-28558 |
Memory corruption in WLAN handler while processing PhyID in Tx status handler
|
7.8
Élevée
|
5 sept. 2023 |
| CVE-2023-28561 |
Memory corruption in QESL while processing payload from external ESL device to firmware
|
9.8
Critique
|
8 août 2023 |
| CVE-2023-21652 |
Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use
|
7.7
Élevée
|
8 août 2023 |
| CVE-2023-21651 |
Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE
|
9.3
Critique
|
8 août 2023 |
| CVE-2023-28541 |
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data
|
7.8
Élevée
|
4 juil. 2023 |
| CVE-2022-40515 |
Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms
|
7.3
Élevée
|
7 mars 2023 |
| CVE-2022-33278 |
Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than…
|
7.8
Élevée
|
7 mars 2023 |