6.2CVSS
5.3AI Score
0.0004EPSS
information disclosure due to cryptographic issue in Core during RPMB read request.
7.1CVSS
5.2AI Score
0.0004EPSS
Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote
9.8CVSS
9AI Score
0.001EPSS
Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.
8.4CVSS
7.9AI Score
0.0004EPSS
8.4CVSS
7.7AI Score
0.0004EPSS
Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response
7.8CVSS
8AI Score
0.0004EPSS
Information disclosure in modem due to buffer over-read while processing response from DNS server
8.2CVSS
7.4AI Score
0.001EPSS
9.8CVSS
9.5AI Score
0.002EPSS
Information disclosure in modem due to buffer over read in dns client due to missing length check
8.2CVSS
7.4AI Score
0.001EPSS
Denial of service in modem due to null pointer dereference while processing DNS packets
7.5CVSS
7.4AI Score
0.001EPSS
Denial of service in modem due to missing null check while processing IP packets with padding
7.5CVSS
7.4AI Score
0.001EPSS
Denial of service in modem due to missing null check while processing TCP or UDP packets from server
7.5CVSS
7.4AI Score
0.001EPSS
Information disclosure in modem due to buffer over-red while performing checksum of packet received
8.2CVSS
7.5AI Score
0.001EPSS
8.8CVSS
9.3AI Score
0.001EPSS
Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets.
8.2CVSS
7.5AI Score
0.001EPSS
Memory corruption due to double free in core while initializing the encryption key.
9.3CVSS
7.8AI Score
0.0004EPSS
Memory corruption due to configuration weakness in modem wile sending command to write protected files.
7.8CVSS
7.8AI Score
0.0004EPSS
Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD.
7.8CVSS
7.9AI Score
0.0004EPSS
7.8CVSS
7.8AI Score
0.0004EPSS
Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http.
7.8CVSS
7.9AI Score
0.0004EPSS
Information disclosure due to buffer over-read in Bluetooth HOST while processing GetFolderItems and GetItemAttribute Cmds from peer device.
8.2CVSS
6.5AI Score
0.001EPSS
Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone.
9.3CVSS
7AI Score
0.0004EPSS
Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message.
7.9CVSS
8AI Score
0.001EPSS
Memory corruption in Audio due to integer overflow to buffer overflow while music playback of clips like amr,evrc,qcelp with modified content.
7.8CVSS
8AI Score
0.0004EPSS
8.2CVSS
7.5AI Score
0.001EPSS
Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.
8.4CVSS
7.7AI Score
0.0004EPSS
Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.
8.4CVSS
7.8AI Score
0.0004EPSS
Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity.
7.8CVSS
7.8AI Score
0.0004EPSS
Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet.
8.8CVSS
8.7AI Score
0.001EPSS
Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.
7.5CVSS
6.5AI Score
0.001EPSS
Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.
7.5CVSS
6.5AI Score
0.001EPSS
Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet.
8.2CVSS
7.5AI Score
0.001EPSS
Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.
6.8CVSS
6.8AI Score
0.001EPSS
Transient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed.
7.5CVSS
7.4AI Score
0.001EPSS
Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.
8.2CVSS
7.4AI Score
0.001EPSS
Transient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protocol PDU with zero length data.
7.5CVSS
7.4AI Score
0.001EPSS
Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.
7.8CVSS
7.8AI Score
0.0004EPSS
Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet.
7.5CVSS
7.5AI Score
0.001EPSS
Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH.
7.5CVSS
7.4AI Score
0.001EPSS
Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.
8.2CVSS
7.4AI Score
0.001EPSS
Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network.
7.5CVSS
7.4AI Score
0.001EPSS
Memory corruption due to double free in Core while mapping HLOS address to the list.
8.4CVSS
7.8AI Score
0.0004EPSS
Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.
9.8CVSS
9.6AI Score
0.001EPSS
Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.
7.5CVSS
7.6AI Score
0.001EPSS
Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.
9.8CVSS
9.6AI Score
0.002EPSS
Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.
9.8CVSS
9.5AI Score
0.002EPSS
8.4CVSS
7.8AI Score
0.0004EPSS
8.4CVSS
8AI Score
0.0004EPSS
6.8CVSS
5.5AI Score
0.0004EPSS
6.8CVSS
5.5AI Score
0.0004EPSS