| CVE-2022-40536 |
Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network
|
7.5
Élevée
|
6 juin 2023 |
| CVE-2022-40533 |
Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request
|
6.2
Moyenne
|
6 juin 2023 |
| CVE-2022-40522 |
Memory corruption in Linux Networking due to double free while handling a hyp-assign
|
8.4
Élevée
|
6 juin 2023 |
| CVE-2022-33307 |
Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed
|
8.4
Élevée
|
6 juin 2023 |
| CVE-2022-33264 |
Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message
|
7.9
Élevée
|
6 juin 2023 |
| CVE-2022-33230 |
Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host
|
6.7
Moyenne
|
6 juin 2023 |
| CVE-2022-22060 |
Assertion occurs while processing Reconfiguration message due to improper validation
|
7.5
Élevée
|
6 juin 2023 |
| CVE-2023-21665 |
Memory corruption in Graphics while importing a file
|
8.4
Élevée
|
2 mai 2023 |
| CVE-2022-40508 |
Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which…
|
7.5
Élevée
|
2 mai 2023 |
| CVE-2022-33304 |
Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet
|
7.5
Élevée
|
2 mai 2023 |
| CVE-2023-21630 |
Memory Corruption in Multimedia Framework due to integer overflow when synx bind is called along with synx signal
|
8.4
Élevée
|
4 avr. 2023 |
| CVE-2022-33298 |
Memory corruption due to use after free in Modem while modem initialization
|
6.7
Moyenne
|
4 avr. 2023 |
| CVE-2022-33291 |
Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length
|
8.2
Élevée
|
4 avr. 2023 |
| CVE-2022-33289 |
Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card
|
6.8
Moyenne
|
4 avr. 2023 |
| CVE-2022-33288 |
Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write…
|
9.3
Critique
|
4 avr. 2023 |
| CVE-2022-33287 |
Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet
|
8.2
Élevée
|
4 avr. 2023 |
| CVE-2022-25739 |
Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call
|
7.5
Élevée
|
4 avr. 2023 |
| CVE-2022-25726 |
Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet
|
8.2
Élevée
|
4 avr. 2023 |
| CVE-2022-40535 |
Transient DOS due to buffer over-read in WLAN while sending a packet to device
|
7.5
Élevée
|
7 mars 2023 |
| CVE-2022-40527 |
Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM
|
7.5
Élevée
|
7 mars 2023 |
| CVE-2022-40515 |
Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms
|
7.3
Élevée
|
7 mars 2023 |
| CVE-2022-33278 |
Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than…
|
7.8
Élevée
|
7 mars 2023 |
| CVE-2022-33257 |
Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone
|
9.3
Critique
|
7 mars 2023 |
| CVE-2022-33254 |
Transient DOS due to reachable assertion in Modem while processing SIB1 Message
|
7.5
Élevée
|
7 mars 2023 |
| CVE-2022-33250 |
Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE…
|
7.5
Élevée
|
7 mars 2023 |