| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header. |
| Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network. |
| Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE. |
| Transient DOS in Bluetooth Host while rfc slot allocation. |
| Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application. |
| Memory corruption in Audio while processing RT proxy port register driver. |
| Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL. |
| Memory Corruption in Modem due to double free while parsing the PKCS15 sim files. |
| Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level. |
| Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command. |
| Memory Corruption in WLAN HOST while parsing QMI response message from firmware. |
| Memory corruption while using the UIM diag command to get the operators name. |
| Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element. |
| Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL. |
| Memory Corruption in Audio while allocating the ion buffer during the music playback. |
| Memory Corruption in Core due to secure memory access by user while loading modem image. |
| Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption. |
| Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data. |
| Transient DOS while parsing WPA IES, when it is passed with length more than expected size. |
| Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message. |
