Buffer Over-read in WLAN Host Communication
Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
Export limit exceeded: 425850 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.
Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.
Memory corruption while processing IOCTL call for getting group info.
Transient DOS in WLAN Firmware while parsing a NAN management frame.
Memory corruption while invoking IOCTL calls to unmap the DMA buffers.
Memory corruption when two threads try to map and unmap a single node simultaneously.
Transient DOS in WLAN Firmware while parsing rsn ies.
Memory corruption while invoking HGSL IOCTL context create.
Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.
Information disclosure while handling T2LM Action Frame in WLAN Host.
Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager.
Memory corruption while invoking IOCTLs calls in Automotive Multimedia.
Memory corruption when user provides data for FM HCI command control operations.
Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.
Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver.
Transient DOS in WLAN Firmware while parsing no-inherit IES.
Memory Corruption in camera while installing a fd for a particular DMA buffer.
Memory corruption in Graphics Driver when destroying a context with KGSL_GPU_AUX_COMMAND_TIMELINE objects queued.