| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Memory corruption in Boot while running a ListVars test in UEFI Menu during boot. |
| Memory corruption while processing finish_sign command to pass a rsp buffer. |
| Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame. |
| Transient DOS while processing TIM IE from beacon frame as there is no check for IE length. |
| Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message. |
| Transient DOS in Modem while allocating DSM items. |
| Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received. |
| Transient DOS in WLAN Firmware while parsing rsn ies. |
| Cryptographic issue in HLOS during key management. |
| Memory corruption in DSP Service during a remote call from HLOS to DSP. |
| Transient DOS in Automotive OS due to improper authentication to the secure IO calls. |
| Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame. |
| Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value. |
| Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL. |
| Memory corruption in TZ Secure OS while requesting a memory allocation from TA region. |
| Memory corruption in HLOS while running playready use-case. |
| Transient DOS in Data Modem during DTLS handshake. |
| Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking |
| Memory corruption due to use after free issue in kernel while processing ION handles in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables |
| The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption. |