| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points. |
| Memory corruption in Audio while processing IIR config data from AFE calibration block. |
| Memory corruption in Audio while processing the calibration data returned from ACDB loader. |
| Transient DOS in Automotive OS due to improper authentication to the secure IO calls. |
| Memory corruption in HLOS while converting from authorization token to HIDL vector. |
| Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element. |
| Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command. |
| Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size. |
| Memory corruption when there is failed unmap operation in GPU. |
| Memory corruption when IOMMU unmap of a GPU buffer fails in Linux. |
| Transient DOS while decoding message of size that exceeds the available system memory. |
| Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver. |
| Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time. |
| Memory Corruption in Modem due to double free while parsing the PKCS15 sim files. |
| Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network. |
| Memory corruption while processing concurrent IOCTL calls. |
| Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption. |
| Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value. |
| Memory corruption in SPS Application while requesting for public key in sorter TA. |
| Information disclosure while deriving keys for a session for any Widevine use case. |
