8.7CVSS
7.5AI Score
0.0004EPSS
Weak configuration in Automotive while VM is processing a listener request from TEE.
8.2CVSS
8.1AI Score
0.0004EPSS
Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application.
7.8CVSS
7.5AI Score
0.0004EPSS
Memory Corruption in Core due to secure memory access by user while loading modem image.
8.4CVSS
7.5AI Score
0.0004EPSS
8.4CVSS
7.6AI Score
0.0004EPSS
8.2CVSS
7.7AI Score
0.0004EPSS
7.8CVSS
7.6AI Score
0.0004EPSS
Memory corruption in core services when Diag handler receives a command to configure event listeners.
9CVSS
7.8AI Score
0.0004EPSS
Memory corruption in Automotive Display while destroying the image handle created using connected display driver.
8.4CVSS
7.8AI Score
0.0004EPSS
5.5CVSS
5.5AI Score
0.0004EPSS
7.1CVSS
6.8AI Score
0.0004EPSS
Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points.
7.8CVSS
7.9AI Score
0.0004EPSS
Memory corruption in Audio while processing IIR config data from AFE calibration block.
7.8CVSS
7.8AI Score
0.0004EPSS
Memory corruption in Audio while processing the calibration data returned from ACDB loader.
7.8CVSS
7.8AI Score
0.0004EPSS
9.3CVSS
7.8AI Score
0.0004EPSS
Memory corruption in Core when updating rollback version for TA and OTA feature is enabled.
7.8CVSS
7.8AI Score
0.0004EPSS
Memory corruption in HLOS while converting from authorization token to HIDL vector.
7.8CVSS
7.7AI Score
0.0004EPSS
Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.
7.8CVSS
7.7AI Score
0.0004EPSS
8.4CVSS
7.7AI Score
0.0004EPSS
Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size.
9.8CVSS
9.5AI Score
0.001EPSS
Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE.
9.8CVSS
9.5AI Score
0.001EPSS
Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.
7.5CVSS
7.5AI Score
0.0005EPSS
Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.
7.5CVSS
7.5AI Score
0.0005EPSS
Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point.
9.8CVSS
9.4AI Score
0.001EPSS
7.5CVSS
7.5AI Score
0.0005EPSS
9.1CVSS
6.3AI Score
0.001EPSS
7.5CVSS
6.5AI Score
0.001EPSS
7.5CVSS
6.5AI Score
0.001EPSS
Memory corruption while performing finish HMAC operation when context is freed by keymaster.
8.4CVSS
8.6AI Score
0.0004EPSS
7.1CVSS
7AI Score
0.0004EPSS
7.8CVSS
7.9AI Score
0.0004EPSS
7.5CVSS
6.5AI Score
0.001EPSS
Memory corruption when an invoke call and a TEE call are bound for the same trusted application.
7.8CVSS
7.5AI Score
0.0004EPSS
7.8CVSS
7.9AI Score
0.0004EPSS
Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than expected size.
8.4CVSS
8.7AI Score
0.0004EPSS
Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.
8.4CVSS
8.6AI Score
0.0004EPSS
8.4CVSS
8.6AI Score
0.0004EPSS
8.4CVSS
8.6AI Score
0.0004EPSS
Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame.
7.5CVSS
7.6AI Score
0.0005EPSS
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.
7.5CVSS
7.6AI Score
0.0005EPSS
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.
7.5CVSS
7.6AI Score
0.0005EPSS
Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location.
7.5CVSS
7.5AI Score
0.0005EPSS
Memory corruption when two threads try to map and unmap a single node simultaneously.
8.4CVSS
8.6AI Score
0.0004EPSS
7.8CVSS
7.9AI Score
0.0004EPSS