| CVE-2024-43052 |
Memory corruption while processing API calls to NPU with invalid input
|
7.8
Élevée
|
2 déc. 2024 |
| CVE-2024-43048 |
Memory corruption when invalid input is passed to invoke GPU Headroom API call
|
7.8
Élevée
|
2 déc. 2024 |
| CVE-2024-33063 |
Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside…
|
7.5
Élevée
|
2 déc. 2024 |
| CVE-2024-33044 |
Memory corruption while Configuring the SMR/S2CR register in Bypass mode
|
8.4
Élevée
|
2 déc. 2024 |
| CVE-2024-38424 |
Memory corruption during GNSS HAL process initialization
|
7.8
Élevée
|
4 nov. 2024 |
| CVE-2024-38422 |
Memory corruption while processing voice packet with arbitrary data received from ADSP
|
7.8
Élevée
|
4 nov. 2024 |
| CVE-2024-38421 |
Memory corruption while processing GPU commands
|
7.8
Élevée
|
4 nov. 2024 |
| CVE-2024-38419 |
Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node
|
7.8
Élevée
|
4 nov. 2024 |
| CVE-2024-38415 |
Memory corruption while handling session errors from firmware
|
7.8
Élevée
|
4 nov. 2024 |
| CVE-2024-38408 |
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions
|
8.2
Élevée
|
4 nov. 2024 |
| CVE-2024-38405 |
Transient DOS while processing the CU information from RNR IE
|
7.5
Élevée
|
4 nov. 2024 |
| CVE-2024-38403 |
Transient DOS while parsing BTM ML IE when per STA profile is not included
|
7.5
Élevée
|
4 nov. 2024 |
| CVE-2024-33068 |
Transient DOS while parsing fragments of MBSSID IE from beacon frame
|
7.5
Élevée
|
4 nov. 2024 |
| CVE-2024-33033 |
Memory corruption while processing IOCTL calls to unmap the buffers
|
6.7
Moyenne
|
4 nov. 2024 |
| CVE-2024-23385 |
Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE
|
7.5
Élevée
|
4 nov. 2024 |
| CVE-2024-23377 |
Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the…
|
6.7
Moyenne
|
4 nov. 2024 |
| CVE-2024-38397 |
Transient DOS while parsing probe response and assoc response frame
|
7.5
Élevée
|
7 oct. 2024 |
| CVE-2024-33073 |
Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE
|
8.2
Élevée
|
7 oct. 2024 |
| CVE-2024-23369 |
Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers
|
7.8
Élevée
|
7 oct. 2024 |
| CVE-2024-38402 |
Memory corruption while processing IOCTL call for getting group info
|
7.8
Élevée
|
2 sept. 2024 |
| CVE-2024-33060 |
Memory corruption when two threads try to map and unmap a single node simultaneously
|
8.4
Élevée
|
2 sept. 2024 |
| CVE-2024-33057 |
Transient DOS while parsing the multi-link element Control field when common information length check is missing…
|
7.5
Élevée
|
2 sept. 2024 |
| CVE-2024-33054 |
Memory corruption during the handshake between the Primary Virtual Machine and Trusted Virtual Machine
|
7.8
Élevée
|
2 sept. 2024 |
| CVE-2024-33052 |
Memory corruption when user provides data for FM HCI command control operations
|
7.8
Élevée
|
2 sept. 2024 |
| CVE-2024-33051 |
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length
|
7.5
Élevée
|
2 sept. 2024 |