| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it for a process-specific task, issues may arise. |
| Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length. |
| Memory corruption when multiple listeners are being registered with the same file descriptor. |
| Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE. |
| Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size. |
| Memory corruption while operating the mailbox in Automotive. |
| Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element. |
| Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus. |
| Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers. |
| Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests. |
| Memory corruption while processing buffer initialization, when trusted report for certain report types are generated. |
| Transient DOS while parsing per STA profile in ML IE. |
| Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command. |
| Memory corruption in HLOS while converting from authorization token to HIDL vector. |
| Memory corruption in Core while processing control functions. |
| Memory corruption in Audio while processing the calibration data returned from ACDB loader. |
| Memory corruption in Audio while processing IIR config data from AFE calibration block. |
| Memory corruption while processing data packets in diag received from Unix clients. |
| Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware. |
| Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points. |
