Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.
7.5CVSS
7.5AI Score
0.0005EPSS
Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point.
9.8CVSS
9.4AI Score
0.001EPSS
Memory corruption when negative display IDs are sent as input while processing DISPLAYESCAPE event trigger.
8.4CVSS
7.8AI Score
0.0004EPSS
7.5CVSS
7.5AI Score
0.0005EPSS
7.5CVSS
6.5AI Score
0.001EPSS
7.5CVSS
6.5AI Score
0.001EPSS
Information disclosure when ASLR relocates the IMEM and Secure DDR portions as one chunk in virtual address space.
7.1CVSS
6.8AI Score
0.0004EPSS
Memory corruption while performing finish HMAC operation when context is freed by keymaster.
8.4CVSS
8.6AI Score
0.0004EPSS
7.1CVSS
7AI Score
0.0004EPSS
7.8CVSS
7.9AI Score
0.0004EPSS
7.5CVSS
6.5AI Score
0.001EPSS
Memory corruption when an invoke call and a TEE call are bound for the same trusted application.
7.8CVSS
7.5AI Score
0.0004EPSS
Memory corruption during the secure boot process, when the bootm command is used, it bypasses the authentication of the kernel/rootfs image.
7.8CVSS
7.1AI Score
0.0004EPSS
7.8CVSS
7.9AI Score
0.0004EPSS
Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than expected size.
8.4CVSS
8.7AI Score
0.0004EPSS
Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.
8.4CVSS
8.6AI Score
0.0004EPSS
8.4CVSS
8.6AI Score
0.0004EPSS