CVE ID | Publié | Description | Score | Gravité |
---|---|---|---|---|
Memory corruption when an invoke call and a TEE call are bound for the same trusted application. | 7.8 |
Haute |
||
Memory corruption while processing key blob passed by the user. | 7.8 |
Haute |
||
Transient DOS while loading the TA ELF file. | 7.1 |
Haute |
||
Memory corruption while performing finish HMAC operation when context is freed by keymaster. | 8.4 |
Haute |
||
Memory corruption while processing IOCTL handler in FastRPC. | 8.4 |
Haute |
||
Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame. | 7.5 |
Haute |
||
Memory corruption in HLOS while invoking IOCTL calls from user-space. | 8.4 |
Haute |
||
Memory corruption in Boot while running a ListVars test in UEFI Menu during boot. | 7.8 |
Haute |
||
Transient DOS in WLAN Firmware while parsing no-inherit IES. | 7.5 |
Haute |
||
Memory corruption in WLAN Firmware while doing a memory copy of pmk cache. | 9.8 |
Critique |
||
Transient DOS in WLAN Firmware while parsing rsn ies. | 7.5 |
Haute |
||
Transient DOS in WLAN Firmware while parsing a NAN management frame. | 7.5 |
Haute |
||
Memory Corruption in HLOS while registering for key provisioning notify. | 8.4 |
Haute |
||
Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application. | 7.8 |
Haute |
||
Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame. | 7.5 |
Haute |
||
Memory corruption in WLAN HAL while parsing WMI command parameters. | 7.8 |
Haute |
||
Memory corruption in WLAN HAL while handling command through WMI interfaces. | 7.8 |
Haute |
||
Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range. | 8.4 |
Haute |
||
Transient DOS in WLAN Firmware while processing frames with missing header fields. | 7.5 |
Haute |
||
Transient DOS in WLAN Firmware while processing the received beacon or probe response frame. | 7.5 |
Haute |
||
Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request. | 6.2 |
Moyen |
||
Memory corruption due to improper access control in kernel while processing a mapping request from root process. | 7.8 |
Haute |
||
Information disclosure in Kernel due to indirect branch misprediction. | 7.1 |
Haute |
||
Memory corruption due to double free in Core while mapping HLOS address to the list. | 8.4 |
Haute |
||
Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed. | 8.4 |
Haute |
||
information disclosure due to cryptographic issue in Core during RPMB read request. | 7.1 |
Haute |