| CVE-2023-24847 |
Transient DOS in Modem while allocating DSM items
|
7.5
Élevée
|
3 oct. 2023 |
| CVE-2023-28558 |
Memory corruption in WLAN handler while processing PhyID in Tx status handler
|
7.8
Élevée
|
5 sept. 2023 |
| CVE-2023-28555 |
Transient DOS in Audio while remapping channel buffer in media codec decoding
|
7.5
Élevée
|
8 août 2023 |
| CVE-2023-21652 |
Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use
|
7.7
Élevée
|
8 août 2023 |
| CVE-2023-21651 |
Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE
|
9.3
Critique
|
8 août 2023 |
| CVE-2023-28542 |
Memory Corruption in WLAN HOST while fetching TX status information
|
7.8
Élevée
|
4 juil. 2023 |
| CVE-2023-22386 |
Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory
|
7.8
Élevée
|
4 juil. 2023 |
| CVE-2023-21629 |
Memory Corruption in Modem due to double free while parsing the PKCS15 sim files
|
6.8
Moyenne
|
4 juil. 2023 |
| CVE-2023-21660 |
Transient DOS in WLAN Firmware while parsing FT Information Elements
|
7.5
Élevée
|
6 juin 2023 |
| CVE-2022-40536 |
Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network
|
7.5
Élevée
|
6 juin 2023 |
| CVE-2022-40533 |
Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request
|
6.2
Moyenne
|
6 juin 2023 |
| CVE-2022-33307 |
Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed
|
8.4
Élevée
|
6 juin 2023 |
| CVE-2022-33304 |
Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet
|
7.5
Élevée
|
2 mai 2023 |
| CVE-2022-33291 |
Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length
|
8.2
Élevée
|
4 avr. 2023 |
| CVE-2022-33288 |
Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write…
|
9.3
Critique
|
4 avr. 2023 |
| CVE-2022-33287 |
Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet
|
8.2
Élevée
|
4 avr. 2023 |
| CVE-2022-25739 |
Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call
|
7.5
Élevée
|
4 avr. 2023 |
| CVE-2022-25726 |
Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet
|
8.2
Élevée
|
4 avr. 2023 |
| CVE-2022-40527 |
Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM
|
7.5
Élevée
|
7 mars 2023 |
| CVE-2022-33278 |
Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than…
|
7.8
Élevée
|
7 mars 2023 |
| CVE-2022-33257 |
Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone
|
9.3
Critique
|
7 mars 2023 |
| CVE-2022-33242 |
Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD
|
7.8
Élevée
|
7 mars 2023 |
| CVE-2022-40512 |
Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon
|
7.5
Élevée
|
9 févr. 2023 |
| CVE-2022-40502 |
Transient DOS due to improper input validation in WLAN Host
|
7.5
Élevée
|
9 févr. 2023 |
| CVE-2022-34146 |
Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation
|
7.5
Élevée
|
9 févr. 2023 |