6.2CVSS
5.4AI Score
0.0004EPSS
6.8CVSS
6.6AI Score
0.001EPSS
Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.
9.8CVSS
9.4AI Score
0.001EPSS
Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.
7.8CVSS
7.5AI Score
0.0004EPSS
Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony.
7.8CVSS
7.6AI Score
0.0004EPSS
7.8CVSS
7.8AI Score
0.0004EPSS
Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client.
7.8CVSS
7.8AI Score
0.0004EPSS
Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions.
8.4CVSS
7.8AI Score
0.0004EPSS
Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.
7.8CVSS
7.5AI Score
0.0004EPSS
Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.
7.8CVSS
7.5AI Score
0.0004EPSS
7.8CVSS
7.6AI Score
0.001EPSS
7.8CVSS
7.6AI Score
0.0005EPSS
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data.
7.8CVSS
7.7AI Score
0.0004EPSS
7.8CVSS
7.6AI Score
0.0004EPSS
Memory corruption in WLAN HAL while passing command parameters through WMI interfaces.
7.8CVSS
7.9AI Score
0.0004EPSS
Memory corruption in WLAN HAL while handling command streams through WMI interfaces.
7.8CVSS
7.9AI Score
0.0004EPSS
7.8CVSS
7.9AI Score
0.0004EPSS
The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handle is passed to it.
7.8CVSS
7.5AI Score
0.0004EPSS
Memory corruption in Graphics while processing user packets for command submission.
8.4CVSS
7.9AI Score
0.0004EPSS
8.4CVSS
8.6AI Score
0.0004EPSS