IID, Inc. Security Vulnerabilities

CVE-2022-33304

Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP...

CVE-2022-33296

Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update...

CVE-2022-33292

Memory corruption in Qualcomm IPC due to use after free while receiving the incoming packet and reposting...

CVE-2022-33281

Memory corruption due to improper validation of array index in computer vision while testing EVA kernel without sending any...

CVE-2022-33277

Memory corruption in modem due to buffer copy without checking size of input while receiving WMI...

CVE-2022-33270

Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration...

CVE-2022-33271

Information disclosure due to buffer over-read in WLAN while parsing NMF...

CVE-2022-33267

Memory corruption in Linux while sending DRM...

CVE-2022-33260

Memory corruption due to stack based buffer overflow in core while sending command from USB of large...

CVE-2022-33250

Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE...

CVE-2022-33248

Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi...

CVE-2022-33242

Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio...

CVE-2022-33230

Memory corruption in FM Host due to buffer copy without checking the size of input in FM...

CVE-2022-33227

Memory corruption in Linux android due to double free while calling unregister provider after register...

CVE-2022-33229

Information disclosure due to buffer over-read in Modem while using static array to process IPv4...

CVE-2022-33224

Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl...

CVE-2022-33213

Memory corruption in modem due to buffer overflow while processing a PPP...

CVE-2022-25745

Memory corruption in modem due to improper input validation while handling the incoming CoAP...

CVE-2022-25731

Information disclosure in modem due to buffer over-read while processing packets from DNS...

CVE-2022-25734

Denial of service in modem due to missing null check while processing IP packets with...

CVE-2022-25733

Denial of service in modem due to null pointer dereference while processing DNS...

CVE-2022-25726

Information disclosure in modem data due to array out of bound access while handling the incoming DNS response...

CVE-2023-43512

Transient DOS while parsing GATT service data when the total amount of memory that is required by the multiple services is greater than the actual size of the services...

CVE-2023-33110

The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory...

CVE-2023-33109

Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from...

CVE-2023-33108

Memory corruption in Graphics Driver when destroying a context with KGSL_GPU_AUX_COMMAND_TIMELINE objects...

CVE-2023-33107

Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL...

CVE-2023-33088

Memory corruption when processing cmd parameters while parsing...

CVE-2023-33080

Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management...

CVE-2023-33068

Memory corruption in Audio while processing IIR config data from AFE calibration...

CVE-2023-33070

Transient DOS in Automotive OS due to improper authentication to the secure IO...

CVE-2023-33064

Transient DOS in Audio when invoking callback function of ASM...

CVE-2023-33037

Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB...

CVE-2023-33036

Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI...

CVE-2023-33033

Memory corruption in Audio during playback with speaker...

CVE-2023-33017

Memory corruption in Boot while running a ListVars test in UEFI Menu during...

CVE-2023-33022

Memory corruption in HLOS while invoking IOCTL calls from...

CVE-2023-28580

Memory corruption in WLAN Host while setting the PMK length in PMK length in internal...

CVE-2023-43553

Memory corruption while parsing beacon/probe response frame when AP sends more supported links in...

CVE-2023-43550

Memory corruption while processing a QMI request for allocating memory from a DHMS supported...

CVE-2023-43541

Memory corruption while invoking the SubmitCommands call on Gfx engine during the graphics...

CVE-2023-33095

Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in...

CVE-2023-28582

Memory corruption in Data Modem while verifying hello-verify message during the DTLS...

CVE-2023-33074

Memory corruption in Audio when SSR event is triggered after music playback is...

CVE-2023-33059

Memory corruption in Audio while processing the VOC packet data from...

CVE-2023-28584

Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement...

CVE-2023-28576

The buffer obtained from kernel APIs such as cam_mem_get_cpu_buf() may be readable/writable in userspace after kernel accesses it. In other words, user mode may race and modify the packet header (e.g. header.count), causing checks (e.g. size checks) in kernel code to be invalid. This may lead to...

CVE-2023-28556

Cryptographic issue in HLOS during key...

CVE-2023-28545

Memory corruption in TZ Secure OS while loading an app...

CVE-2023-28542

Memory Corruption in WLAN HOST while fetching TX status...