| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Memory Corruption in Modem due to double free while parsing the PKCS15 sim files. |
| Memory corruption in SPS Application while requesting for public key in sorter TA. |
| Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application. |
| Transient DOS while parsing WPA IES, when it is passed with length more than expected size. |
| Memory corruption while processing buffer initialization, when trusted report for certain report types are generated. |
| Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network. |
| Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVCS_LOAD_MODULE command. |
| Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL. |
| Transient DOS in WLAN Firmware while parsing a BTM request. |
| Memory corruption when processing cmd parameters while parsing vdev. |
| Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size. |
| Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR. |
| Memory Corruption in Audio while allocating the ion buffer during the music playback. |
| Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16. |
| Transient DOS in WLAN Firmware while parsing no-inherit IES. |
| Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE. |
| Improper Access to the VM resource manager can lead to Memory Corruption. |
| Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element. |
| Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers. |
| Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received. |
