| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Memory corruption in video while parsing invalid mp2 clip. |
| Memory corruption may occur while validating ports and channels in Audio driver. |
| Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL. |
| Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers. |
| While processing the authentication message in UE, improper authentication may lead to information disclosure. |
| Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size. |
| Transient DOS in Multi-Mode Call Processor while processing UE policy container. |
| Information disclosure in Audio while accessing AVCS services from ADSP payload. |
| Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header. |
| Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length. |
| Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it for a process-specific task, issues may arise. |
| Memory corruption during concurrent access to server info object due to unprotected critical field. |
| Memory corruption while processing buffer initialization, when trusted report for certain report types are generated. |
| Memory corruption while processing image encoding, when input buffer length is 0 in IOCTL call. |
| Memory corruption when the IOCTL call is interrupted by a signal. |
| Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points. |
| Memory corruption in Graphics Driver when destroying a context with KGSL_GPU_AUX_COMMAND_TIMELINE objects queued. |
| Transient DOS in WLAN Firmware while parsing no-inherit IES. |
| Memory corruption while processing event close when client process terminates abruptly. |
| Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR. |
