CVE ID | Published | Description | Score | Severity |
---|---|---|---|---|
Memory corruption when an invoke call and a TEE call are bound for the same trusted application. | 7.8 |
HIGH |
||
Memory corruption while processing key blob passed by the user. | 7.8 |
HIGH |
||
Transient DOS while loading the TA ELF file. | 7.1 |
HIGH |
||
Memory corruption while performing finish HMAC operation when context is freed by keymaster. | 8.4 |
HIGH |
||
Memory corruption while processing IOCTL handler in FastRPC. | 8.4 |
HIGH |
||
Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast. | 7.5 |
HIGH |
||
Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame. | 7.5 |
HIGH |
||
Memory corruption in HLOS while invoking IOCTL calls from user-space. | 8.4 |
HIGH |
||
Memory corruption while using the UIM diag command to get the operators name. | 7.8 |
HIGH |
||
Memory corruption in Boot while running a ListVars test in UEFI Menu during boot. | 7.8 |
HIGH |
||
Transient DOS in WLAN Firmware while parsing rsn ies. | 7.5 |
HIGH |
||
Information Disclosure in data Modem while parsing an FMTP line in an SDP message. | 8.2 |
HIGH |
||
Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value. | 8.2 |
HIGH |
||
Transient DOS in Modem while allocating DSM items. | 7.5 |
HIGH |
||
Memory Corruption in Data Modem while making a MO call or MT VOLTE call. | 9.8 |
CRITICAL |
||
Improper Access to the VM resource manager can lead to Memory Corruption. | 8.7 |
HIGH |
||
Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame. | 7.5 |
HIGH |
||
Memory corruption in WLAN HAL while parsing WMI command parameters. | 7.8 |
HIGH |
||
Memory corruption in WLAN HAL while handling command through WMI interfaces. | 7.8 |
HIGH |
||
Memory corruption in WLAN HAL while handling command streams through WMI interfaces. | 7.8 |
HIGH |
||
Memory corruption in WLAN HAL while passing command parameters through WMI interfaces. | 7.8 |
HIGH |
||
Memory corruption while handling payloads from remote ESL. | 9.8 |
CRITICAL |
||
Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload. | 7.8 |
HIGH |
||
Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range. | 8.4 |
HIGH |
||
Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network. | 9.8 |
CRITICAL |
||
Memory Corruption in Modem due to double free while parsing the PKCS15 sim files. | 6.8 |
MEDIUM |
||
Transient DOS in WLAN Firmware while processing frames with missing header fields. | 7.5 |
HIGH |
||
Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command. | 8.4 |
HIGH |
||
Memory corruption due to improper access control in kernel while processing a mapping request from root process. | 7.8 |
HIGH |
||
Information disclosure in Kernel due to indirect branch misprediction. | 7.1 |
HIGH |
||
Transient DOS due to improper authorization in Modem | 7.5 |
HIGH |
||
Memory corruption due to double free in Core while mapping HLOS address to the list. | 8.4 |
HIGH |
||
Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed. | 8.4 |
HIGH |
||
Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message. | 7.9 |
HIGH |
||
information disclosure due to cryptographic issue in Core during RPMB read request. | 7.1 |
HIGH |
||
Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network. | 7.5 |
HIGH |