CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
Memory Corruption in WLAN HOST while parsing QMI response message from firmware. |
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length. |
Information disclosure while handling T2LM Action Frame in WLAN Host. |
Information disclosure may occur due to improper permission and access controls to Video Analytics engine. |
Memory corruption while processing escape code, when DisplayId is passed with large unsigned value. |
Memory corruption while processing buffer initialization, when trusted report for certain report types are generated. |
Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption. |
Transient DOS in Modem when a Beam switch request is made with a non-configured BWP. |
Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it for a process-specific task, issues may arise. |
Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level. |
Transient DOS in WLAN Firmware while parsing a NAN management frame. |
Transient DOS in WLAN Firmware while parsing a BTM request. |
Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE. |
Transient DOS while parse fils IE with length equal to 1. |
Memory Corruption in Audio while invoking callback function in driver from ADSP. |
Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables |
Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables |
Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables |
Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music |
Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands. |