Buffer Over-read in WLAN Host Communication
Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
Export limit exceeded: 425850 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.
Transient DOS in Audio when invoking callback function of ASM driver.
Memory corruption when two threads try to map and unmap a single node simultaneously.
Memory corruption while operating the mailbox in Automotive.
Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location.
Information disclosure in Audio while accessing AVCS services from ADSP payload.
Memory corruption when user provides data for FM HCI command control operations.
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.
Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame.
Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points.
Transient DOS may occur while processing the country IE.
Memory corruption when Alternative Frequency offset value is set to 255.
Memory corruption in Audio while processing IIR config data from AFE calibration block.
Memory corruption in Audio while processing the calibration data returned from ACDB loader.
Transient DOS in Automotive OS due to improper authentication to the secure IO calls.
Memory corruption in Core while processing control functions.
Memory corruption in HLOS while converting from authorization token to HIDL vector.
Memory corruption in Audio while running invalid audio recording from ADSP.