| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Memory corruption while processing a QMI request for allocating memory from a DHMS supported subsystem. |
| Memory corruption while processing data packets in diag received from Unix clients. |
| Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur. |
| Memory corruption while calling the NPU driver APIs concurrently. |
| Memory corruption in SPS Application while requesting for public key in sorter TA. |
| Memory corruption in Core Services while executing the command for removing a single event listener. |
| Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling. |
| Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element. |
| Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size. |
| Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL. |
| Memory corruption while verifying the serialized header when the key pairs are generated. |
| Memory corruption while processing MBSSID beacon containing several subelement IE. |
| Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length. |
| Transient DOS while parsing probe response and assoc response frame. |
| Memory corruption when the payload received from firmware is not as per the expected protocol size. |
| Information disclosure in Audio while accessing AVCS services from ADSP payload. |
| Transient DOS during hypervisor virtual I/O operation in a virtual machine. |
| Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame. |
| Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size. |
| Memory corruption while copying the result to the transmission queue which is shared between the virtual machine and the host. |
