| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element. |
| Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE. |
| Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size. |
| Memory corruption while invoking IOCTLs calls in Automotive Multimedia. |
| Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers. |
| Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL. |
| Transient DOS while parse fils IE with length equal to 1. |
| Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager. |
| Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location. |
| Transient DOS during hypervisor virtual I/O operation in a virtual machine. |
| Memory corruption while invoking HGSL IOCTL context create. |
| Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length. |
| Memory corruption when multiple listeners are being registered with the same file descriptor. |
| Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size. |
| Memory corruption while verifying the serialized header when the key pairs are generated. |
| Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame. |
| Memory corruption while processing MBSSID beacon containing several subelement IE. |
| Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame. |
| Memory corruption in Audio while processing the calibration data returned from ACDB loader. |
| Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points. |
