CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame. |
Memory corruption in Audio while processing the VOC packet data from ADSP. |
Memory corruption when multiple listeners are being registered with the same file descriptor. |
While processing the authentication message in UE, improper authentication may lead to information disclosure. |
Transient DOS during hypervisor virtual I/O operation in a virtual machine. |
Memory corruption in display driver while detaching a device. |
Memory corruption while parsing qcp clip with invalid chunk data size. |
Memory corruption in Audio while processing IIR config data from AFE calibration block. |
Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application. |
Memory Corruption in Data Modem while making a MO call or MT VOLTE call. |
Memory corruption as GPU registers beyond the last protected range can be accessed through LPAC submissions. |
Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions. |
Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point. |
Information disclosure while deriving keys for a session for any Widevine use case. |
Memory corruption while playing audio file having large-sized input buffer. |
Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables |
Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables |
Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables |
Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music |
Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands. |