| CVE-2024-33056 |
Memory corruption when allocating and accessing an entry in an SMEM partition continuously
|
8.4
Élevée
|
2 déc. 2024 |
| CVE-2024-38423 |
Memory corruption while processing GPU page table switch
|
7.8
Élevée
|
4 nov. 2024 |
| CVE-2024-38422 |
Memory corruption while processing voice packet with arbitrary data received from ADSP
|
7.8
Élevée
|
4 nov. 2024 |
| CVE-2024-38419 |
Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node
|
7.8
Élevée
|
4 nov. 2024 |
| CVE-2024-38415 |
Memory corruption while handling session errors from firmware
|
7.8
Élevée
|
4 nov. 2024 |
| CVE-2024-38402 |
Memory corruption while processing IOCTL call for getting group info
|
7.8
Élevée
|
2 sept. 2024 |
| CVE-2024-33060 |
Memory corruption when two threads try to map and unmap a single node simultaneously
|
8.4
Élevée
|
2 sept. 2024 |
| CVE-2024-33051 |
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length
|
7.5
Élevée
|
2 sept. 2024 |
| CVE-2024-33050 |
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing…
|
7.5
Élevée
|
2 sept. 2024 |
| CVE-2024-33045 |
Memory corruption when BTFM client sends new messages over Slimbus to ADSP
|
8.4
Élevée
|
2 sept. 2024 |
| CVE-2024-33016 |
memory corruption when an invalid firehose patch command is invoked
|
6.8
Moyenne
|
2 sept. 2024 |
| CVE-2024-23362 |
Cryptographic issue while parsing RSA keys in COBR format
|
7.1
Élevée
|
2 sept. 2024 |
| CVE-2024-33028 |
Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released
|
8.4
Élevée
|
5 août 2024 |
| CVE-2024-33027 |
Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by…
|
8.4
Élevée
|
5 août 2024 |
| CVE-2024-33023 |
Memory corruption while creating a fence to wait on timeline events, and simultaneously signal timeline events
|
8.4
Élevée
|
5 août 2024 |
| CVE-2024-33022 |
Memory corruption while allocating memory in HGSL driver
|
8.4
Élevée
|
5 août 2024 |
| CVE-2024-33021 |
Memory corruption while processing IOCTL call to set metainfo
|
8.4
Élevée
|
5 août 2024 |
| CVE-2024-33014 |
Transient DOS while parsing ESP IE from beacon/probe response frame
|
7.5
Élevée
|
5 août 2024 |
| CVE-2024-33012 |
Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with…
|
7.5
Élevée
|
5 août 2024 |
| CVE-2024-33011 |
Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero
|
7.5
Élevée
|
5 août 2024 |
| CVE-2024-33010 |
Transient DOS while parsing fragments of MBSSID IE from beacon frame
|
7.5
Élevée
|
5 août 2024 |
| CVE-2024-23356 |
Memory corruption during session sign renewal request calls in HLOS
|
7.8
Élevée
|
5 août 2024 |
| CVE-2024-23353 |
Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI
|
7.5
Élevée
|
5 août 2024 |
| CVE-2024-23373 |
Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released
|
8.4
Élevée
|
1 juil. 2024 |
| CVE-2024-23368 |
Memory corruption when allocating and accessing an entry in an SMEM partition
|
7.8
Élevée
|
1 juil. 2024 |