| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations. |
| Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed. |
| Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations. |
| Transient DOS when processing authentication frames with invalid FILS information element header lengths. |
| Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled. |
| Information Disclosure when processing wireless network channel switch information with improperly formatted length fields. |
| Cryptographic Issue while processing registration requests with malformed or missing authentication parameters. |
| Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration. |
| Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values. |
| Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling. |
| Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities. |
| Memory Corruption when copying data from a freed source while executing performance counter deselect operation. |
| Transient DOS when processing target power rate tables during channel configuration. |
| Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming. |
| Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified. |
| Memory corruption while using alignments for memory allocation. |
| Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection. |
| Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation. |
| Memory corruption when decoding corrupted satellite data files with invalid signature offsets. |
| Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans. |
