NULL Pointer Dereference in WLAN Firmware
Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.
Export limit exceeded: 425857 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.
Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.
Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size.
Memory corruption when IOCTL call is invoked from user-space to read board data.
Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.
Cryptographic issue occurs due to use of insecure connection method while downloading.
Memory corruption while processing manipulated payload in video firmware.
Transient DOS in Modem when a Beam switch request is made with a non-configured BWP.
Memory corruption while invoking IOCTLs calls in Automotive Multimedia.
Transient DOS in Data modem while handling TLB control messages from the Network.
Transient DOS in Audio when invoking callback function of ASM driver.
Memory corruption in MPP performance while accessing DSM watermark using external memory address.
Memory corruption when multiple listeners are being registered with the same file descriptor.
Memory corruption when two threads try to map and unmap a single node simultaneously.
Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
Memory corruption when resource manager sends the host kernel a reply message with multiple fragments.
Information disclosure while deriving keys for a session for any Widevine use case.
Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.
Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command.
Transient DOS while processing PDU Release command with a parameter PDU ID out of range.