| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE. |
| Memory Corruption in Audio while allocating the ion buffer during the music playback. |
| Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper. |
| Memory corruption while processing buffer initialization, when trusted report for certain report types are generated. |
| Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element. |
| Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager. |
| While processing the authentication message in UE, improper authentication may lead to information disclosure. |
| Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command. |
| Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers. |
| Memory corruption when processing cmd parameters while parsing vdev. |
| Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests. |
| Memory corruption in Core Services while executing the command for removing a single event listener. |
| Transient DOS when processing a NULL buffer while parsing WLAN vdev. |
| Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame. |
| Memory corruption in Audio when memory map command is executed consecutively in ADSP. |
| Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received. |
| Memory corruption while processing MBSSID beacon containing several subelement IE. |
| Memory corruption in Core while processing control functions. |
| Memory Corruption in Modem due to double free while parsing the PKCS15 sim files. |
| Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size. |
