| CVE-2024-43053 |
Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information
|
7.8
Élevée
|
2 déc. 2024 |
| CVE-2024-43052 |
Memory corruption while processing API calls to NPU with invalid input
|
7.8
Élevée
|
2 déc. 2024 |
| CVE-2024-43050 |
Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver
|
7.8
Élevée
|
2 déc. 2024 |
| CVE-2024-43049 |
Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver
|
7.8
Élevée
|
2 déc. 2024 |
| CVE-2024-33056 |
Memory corruption when allocating and accessing an entry in an SMEM partition continuously
|
8.4
Élevée
|
2 déc. 2024 |
| CVE-2024-33044 |
Memory corruption while Configuring the SMR/S2CR register in Bypass mode
|
8.4
Élevée
|
2 déc. 2024 |
| CVE-2024-38410 |
Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice
|
7.8
Élevée
|
4 nov. 2024 |
| CVE-2024-38409 |
Memory corruption while station LL statistic handling
|
7.8
Élevée
|
4 nov. 2024 |
| CVE-2024-38408 |
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions
|
8.2
Élevée
|
4 nov. 2024 |
| CVE-2024-38407 |
Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver
|
7.8
Élevée
|
4 nov. 2024 |
| CVE-2024-38406 |
Memory corruption while handling IOCTL calls in JPEG Encoder driver
|
7.8
Élevée
|
4 nov. 2024 |
| CVE-2024-38403 |
Transient DOS while parsing BTM ML IE when per STA profile is not included
|
7.5
Élevée
|
4 nov. 2024 |
| CVE-2024-33065 |
Memory corruption while taking snapshot when an offset variable is set by camera driver
|
8.4
Élevée
|
7 oct. 2024 |
| CVE-2024-23369 |
Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers
|
7.8
Élevée
|
7 oct. 2024 |
| CVE-2024-33051 |
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length
|
7.5
Élevée
|
2 sept. 2024 |
| CVE-2024-33047 |
Memory corruption when the captureRead QDCM command is invoked from user-space
|
8.4
Élevée
|
2 sept. 2024 |
| CVE-2024-33016 |
memory corruption when an invalid firehose patch command is invoked
|
6.8
Moyenne
|
2 sept. 2024 |
| CVE-2024-23364 |
Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information…
|
7.5
Élevée
|
2 sept. 2024 |
| CVE-2024-23362 |
Cryptographic issue while parsing RSA keys in COBR format
|
7.1
Élevée
|
2 sept. 2024 |
| CVE-2024-33013 |
Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length
|
7.5
Élevée
|
5 août 2024 |
| CVE-2024-23356 |
Memory corruption during session sign renewal request calls in HLOS
|
7.8
Élevée
|
5 août 2024 |
| CVE-2024-23355 |
Memory corruption when keymaster operation imports a shared key
|
7.8
Élevée
|
5 août 2024 |
| CVE-2024-21481 |
Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager
|
8.4
Élevée
|
5 août 2024 |
| CVE-2024-21469 |
Memory corruption when an invoke call and a TEE call are bound for the same trusted application
|
7.3
Élevée
|
1 juil. 2024 |
| CVE-2024-21465 |
Memory corruption while processing key blob passed by the user
|
7.8
Élevée
|
1 juil. 2024 |