| CVE-2024-43052 |
Memory corruption while processing API calls to NPU with invalid input
|
7.8
Élevée
|
2 déc. 2024 |
| CVE-2024-33056 |
Memory corruption when allocating and accessing an entry in an SMEM partition continuously
|
8.4
Élevée
|
2 déc. 2024 |
| CVE-2024-33053 |
Memory corruption when multiple threads try to unregister the CVP buffer at the same time
|
6.7
Moyenne
|
2 déc. 2024 |
| CVE-2024-33044 |
Memory corruption while Configuring the SMR/S2CR register in Bypass mode
|
8.4
Élevée
|
2 déc. 2024 |
| CVE-2024-33037 |
Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC…
|
6.1
Moyenne
|
2 déc. 2024 |
| CVE-2024-33036 |
Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory…
|
6.7
Moyenne
|
2 déc. 2024 |
| CVE-2021-30299 |
Possible out of bound access in audio module due to lack of validation of user provided input
|
6.7
Moyenne
|
22 nov. 2024 |
| CVE-2024-38423 |
Memory corruption while processing GPU page table switch
|
7.8
Élevée
|
4 nov. 2024 |
| CVE-2024-38422 |
Memory corruption while processing voice packet with arbitrary data received from ADSP
|
7.8
Élevée
|
4 nov. 2024 |
| CVE-2024-38415 |
Memory corruption while handling session errors from firmware
|
7.8
Élevée
|
4 nov. 2024 |
| CVE-2024-38408 |
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions
|
8.2
Élevée
|
4 nov. 2024 |
| CVE-2024-33032 |
Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it
|
6.7
Moyenne
|
4 nov. 2024 |
| CVE-2024-23385 |
Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE
|
7.5
Élevée
|
4 nov. 2024 |
| CVE-2024-33073 |
Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE
|
8.2
Élevée
|
7 oct. 2024 |
| CVE-2024-33066 |
Memory corruption while redirecting log file to any file location with any file name
|
9.8
Critique
|
7 oct. 2024 |
| CVE-2024-38401 |
Memory corruption while processing concurrent IOCTL calls
|
7.8
Élevée
|
2 sept. 2024 |
| CVE-2024-33060 |
Memory corruption when two threads try to map and unmap a single node simultaneously
|
8.4
Élevée
|
2 sept. 2024 |
| CVE-2024-33057 |
Transient DOS while parsing the multi-link element Control field when common information length check is missing…
|
7.5
Élevée
|
2 sept. 2024 |
| CVE-2024-33052 |
Memory corruption when user provides data for FM HCI command control operations
|
7.8
Élevée
|
2 sept. 2024 |
| CVE-2024-33051 |
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length
|
7.5
Élevée
|
2 sept. 2024 |
| CVE-2024-33050 |
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing…
|
7.5
Élevée
|
2 sept. 2024 |
| CVE-2024-33048 |
Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame
|
7.5
Élevée
|
2 sept. 2024 |
| CVE-2024-33042 |
Memory corruption when Alternative Frequency offset value is set to 255
|
7.8
Élevée
|
2 sept. 2024 |
| CVE-2024-33016 |
memory corruption when an invalid firehose patch command is invoked
|
6.8
Moyenne
|
2 sept. 2024 |
| CVE-2024-23364 |
Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information…
|
7.5
Élevée
|
2 sept. 2024 |