| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element (IE) of a beacon frame that is received from over-the-air (OTA). |
| Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem. |
| Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network. |
| Memory corruption while processing video packets received from video firmware. |
| information disclosure while invoking calibration data from user space to update firmware size. |
| Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources. |
| Memory corruption may occur while processing voice call registration with user. |
| Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR. |
| Memory corruption while processing commands from A2dp sink command queue. |
| Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network. |
| Information Disclosure in data Modem while parsing an FMTP line in an SDP message. |
| Memory Corruption in Modem due to double free while parsing the PKCS15 sim files. |
| Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments. |
| Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time. |
| Information Disclosure in Qualcomm IPC while reading values from shared memory in VM. |
| Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command. |
| Memory corruption during concurrent access to server info object due to unprotected critical field. |
| Memory Corruption in camera while installing a fd for a particular DMA buffer. |
| Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame. |
| Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element. |
