| CVE-2024-43048 |
Memory corruption when invalid input is passed to invoke GPU Headroom API call
|
7.8
High
|
Dec 2, 2024 |
| CVE-2024-33056 |
Memory corruption when allocating and accessing an entry in an SMEM partition continuously
|
8.4
High
|
Dec 2, 2024 |
| CVE-2024-38424 |
Memory corruption during GNSS HAL process initialization
|
7.8
High
|
Nov 4, 2024 |
| CVE-2024-38423 |
Memory corruption while processing GPU page table switch
|
7.8
High
|
Nov 4, 2024 |
| CVE-2024-38422 |
Memory corruption while processing voice packet with arbitrary data received from ADSP
|
7.8
High
|
Nov 4, 2024 |
| CVE-2024-38421 |
Memory corruption while processing GPU commands
|
7.8
High
|
Nov 4, 2024 |
| CVE-2024-38419 |
Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node
|
7.8
High
|
Nov 4, 2024 |
| CVE-2024-38415 |
Memory corruption while handling session errors from firmware
|
7.8
High
|
Nov 4, 2024 |
| CVE-2024-38408 |
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions
|
8.2
High
|
Nov 4, 2024 |
| CVE-2024-23385 |
Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE
|
7.5
High
|
Nov 4, 2024 |
| CVE-2024-38402 |
Memory corruption while processing IOCTL call for getting group info
|
7.8
High
|
Sep 2, 2024 |
| CVE-2024-33060 |
Memory corruption when two threads try to map and unmap a single node simultaneously
|
8.4
High
|
Sep 2, 2024 |
| CVE-2024-33052 |
Memory corruption when user provides data for FM HCI command control operations
|
7.8
High
|
Sep 2, 2024 |
| CVE-2024-33051 |
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length
|
7.5
High
|
Sep 2, 2024 |
| CVE-2024-33050 |
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing…
|
7.5
High
|
Sep 2, 2024 |
| CVE-2024-33045 |
Memory corruption when BTFM client sends new messages over Slimbus to ADSP
|
8.4
High
|
Sep 2, 2024 |
| CVE-2024-33042 |
Memory corruption when Alternative Frequency offset value is set to 255
|
7.8
High
|
Sep 2, 2024 |
| CVE-2024-33035 |
Memory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients
|
8.4
High
|
Sep 2, 2024 |
| CVE-2024-33016 |
memory corruption when an invalid firehose patch command is invoked
|
6.8
Medium
|
Sep 2, 2024 |
| CVE-2024-23364 |
Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information…
|
7.5
High
|
Sep 2, 2024 |
| CVE-2024-23362 |
Cryptographic issue while parsing RSA keys in COBR format
|
7.1
High
|
Sep 2, 2024 |
| CVE-2024-23359 |
Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network
|
8.2
High
|
Sep 2, 2024 |
| CVE-2024-33034 |
Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and…
|
8.4
High
|
Aug 5, 2024 |
| CVE-2024-33028 |
Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released
|
8.4
High
|
Aug 5, 2024 |
| CVE-2024-33023 |
Memory corruption while creating a fence to wait on timeline events, and simultaneously signal timeline events
|
8.4
High
|
Aug 5, 2024 |