| CVE-2024-33073 |
Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE
|
8.2
Élevée
|
7 oct. 2024 |
| CVE-2024-33065 |
Memory corruption while taking snapshot when an offset variable is set by camera driver
|
8.4
Élevée
|
7 oct. 2024 |
| CVE-2024-23369 |
Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers
|
7.8
Élevée
|
7 oct. 2024 |
| CVE-2024-38402 |
Memory corruption while processing IOCTL call for getting group info
|
7.8
Élevée
|
2 sept. 2024 |
| CVE-2024-33060 |
Memory corruption when two threads try to map and unmap a single node simultaneously
|
8.4
Élevée
|
2 sept. 2024 |
| CVE-2024-33057 |
Transient DOS while parsing the multi-link element Control field when common information length check is missing…
|
7.5
Élevée
|
2 sept. 2024 |
| CVE-2024-33054 |
Memory corruption during the handshake between the Primary Virtual Machine and Trusted Virtual Machine
|
7.8
Élevée
|
2 sept. 2024 |
| CVE-2024-33052 |
Memory corruption when user provides data for FM HCI command control operations
|
7.8
Élevée
|
2 sept. 2024 |
| CVE-2024-33051 |
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length
|
7.5
Élevée
|
2 sept. 2024 |
| CVE-2024-33050 |
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing…
|
7.5
Élevée
|
2 sept. 2024 |
| CVE-2024-33048 |
Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame
|
7.5
Élevée
|
2 sept. 2024 |
| CVE-2024-33047 |
Memory corruption when the captureRead QDCM command is invoked from user-space
|
8.4
Élevée
|
2 sept. 2024 |
| CVE-2024-33045 |
Memory corruption when BTFM client sends new messages over Slimbus to ADSP
|
8.4
Élevée
|
2 sept. 2024 |
| CVE-2024-33042 |
Memory corruption when Alternative Frequency offset value is set to 255
|
7.8
Élevée
|
2 sept. 2024 |
| CVE-2024-33038 |
Memory corruption while passing untrusted/corrupted pointers from DSP to EVA
|
7.8
Élevée
|
2 sept. 2024 |
| CVE-2024-33016 |
memory corruption when an invalid firehose patch command is invoked
|
6.8
Moyenne
|
2 sept. 2024 |
| CVE-2024-23364 |
Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information…
|
7.5
Élevée
|
2 sept. 2024 |
| CVE-2024-23362 |
Cryptographic issue while parsing RSA keys in COBR format
|
7.1
Élevée
|
2 sept. 2024 |
| CVE-2024-23359 |
Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network
|
8.2
Élevée
|
2 sept. 2024 |
| CVE-2024-23358 |
Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem
|
7.5
Élevée
|
2 sept. 2024 |
| CVE-2024-33034 |
Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and…
|
8.4
Élevée
|
5 août 2024 |
| CVE-2024-33028 |
Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released
|
8.4
Élevée
|
5 août 2024 |
| CVE-2024-33026 |
Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size…
|
7.5
Élevée
|
5 août 2024 |
| CVE-2024-33025 |
Transient DOS while parsing the BSS parameter change count or MLD capabilities fields of the ML IE
|
7.5
Élevée
|
5 août 2024 |
| CVE-2024-33024 |
Transient DOS while parsing the ML IE when a beacon with length field inside the common info of ML IE greater than the…
|
7.5
Élevée
|
5 août 2024 |