| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received. |
| Information disclosure in Video while parsing mp2 clip with invalid section length. |
| Memory corruption while invoking callback function of AFE from ADSP. |
| Memory corruption while processing IOCTL handler in FastRPC. |
| Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network. |
| Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory. |
| Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL. |
| Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command. |
| Memory corruption in HLOS while checking for the storage type. |
| Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size. |
| Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element. |
| Transient DOS while parse fils IE with length equal to 1. |
| Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length. |
| Memory Corruption in WLAN HOST while parsing QMI response message from firmware. |
| Memory Corruption in Data Modem while processing DMA buffer release event about CFR data. |
| Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame. |
| Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP. |
| Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked. |
| Memory corruption in MPP performance while accessing DSM watermark using external memory address. |
| Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE. |
