| CVE-2024-43052 |
Memory corruption while processing API calls to NPU with invalid input
|
7.8
Élevée
|
2 déc. 2024 |
| CVE-2024-43050 |
Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver
|
7.8
Élevée
|
2 déc. 2024 |
| CVE-2024-43048 |
Memory corruption when invalid input is passed to invoke GPU Headroom API call
|
7.8
Élevée
|
2 déc. 2024 |
| CVE-2024-33063 |
Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside…
|
7.5
Élevée
|
2 déc. 2024 |
| CVE-2024-33056 |
Memory corruption when allocating and accessing an entry in an SMEM partition continuously
|
8.4
Élevée
|
2 déc. 2024 |
| CVE-2024-33053 |
Memory corruption when multiple threads try to unregister the CVP buffer at the same time
|
6.7
Moyenne
|
2 déc. 2024 |
| CVE-2024-33044 |
Memory corruption while Configuring the SMR/S2CR register in Bypass mode
|
8.4
Élevée
|
2 déc. 2024 |
| CVE-2024-33037 |
Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC…
|
6.1
Moyenne
|
2 déc. 2024 |
| CVE-2024-33036 |
Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory…
|
6.7
Moyenne
|
2 déc. 2024 |
| CVE-2021-30299 |
Possible out of bound access in audio module due to lack of validation of user provided input
|
6.7
Moyenne
|
22 nov. 2024 |
| CVE-2024-38424 |
Memory corruption during GNSS HAL process initialization
|
7.8
Élevée
|
4 nov. 2024 |
| CVE-2024-38423 |
Memory corruption while processing GPU page table switch
|
7.8
Élevée
|
4 nov. 2024 |
| CVE-2024-38422 |
Memory corruption while processing voice packet with arbitrary data received from ADSP
|
7.8
Élevée
|
4 nov. 2024 |
| CVE-2024-38421 |
Memory corruption while processing GPU commands
|
7.8
Élevée
|
4 nov. 2024 |
| CVE-2024-38419 |
Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node
|
7.8
Élevée
|
4 nov. 2024 |
| CVE-2024-38415 |
Memory corruption while handling session errors from firmware
|
7.8
Élevée
|
4 nov. 2024 |
| CVE-2024-38410 |
Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice
|
7.8
Élevée
|
4 nov. 2024 |
| CVE-2024-38409 |
Memory corruption while station LL statistic handling
|
7.8
Élevée
|
4 nov. 2024 |
| CVE-2024-38408 |
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions
|
8.2
Élevée
|
4 nov. 2024 |
| CVE-2024-38407 |
Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver
|
7.8
Élevée
|
4 nov. 2024 |
| CVE-2024-38406 |
Memory corruption while handling IOCTL calls in JPEG Encoder driver
|
7.8
Élevée
|
4 nov. 2024 |
| CVE-2024-38405 |
Transient DOS while processing the CU information from RNR IE
|
7.5
Élevée
|
4 nov. 2024 |
| CVE-2024-38403 |
Transient DOS while parsing BTM ML IE when per STA profile is not included
|
7.5
Élevée
|
4 nov. 2024 |
| CVE-2024-33068 |
Transient DOS while parsing fragments of MBSSID IE from beacon frame
|
7.5
Élevée
|
4 nov. 2024 |
| CVE-2024-33033 |
Memory corruption while processing IOCTL calls to unmap the buffers
|
6.7
Moyenne
|
4 nov. 2024 |