417 matches found
CVE-2024-49844
Memory corruption while triggering commands in the PlayReady Trusted application.
CVE-2024-53018
Memory corruption may occur while processing the OIS packet parser.
CVE-2023-43532
Memory corruption while reading ACPI config through the user mode app.
CVE-2023-43554
Memory corruption while processing IOCTL handler in FastRPC.
CVE-2024-33041
Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,
CVE-2024-45547
Memory corruption while processing IOCTL call invoked from user-space to verify non extension FIPS encryption and decryption functionality.
CVE-2024-45564
Memory corruption during concurrent access to server info object due to incorrect reference count update.
CVE-2024-45578
Memory corruption while acquire and update IOCTLs during IFE output resource ID validation.
CVE-2023-43537
Information disclosure while handling T2LM Action Frame in WLAN Host.
CVE-2023-43544
Memory corruption when IPC callback handle is used after it has been released during register callback by another thread.
CVE-2024-33059
Memory corruption while processing frame command IOCTL calls.
CVE-2024-45576
Memory corruption while prociesing command buffer buffer in OPE module.
CVE-2024-49840
Memory corruption while Invoking IOCTL calls from user-space to validate FIPS encryption or decryption functionality.
CVE-2024-49846
Memory corruption while decoding of OTA messages from T3448 IE.
CVE-2025-21462
Memory corruption while processing an IOCTL request, when buffer significantly exceeds the command argument limit.
CVE-2023-33016
Transient DOS in WLAN firmware while parsing MLO (multi-link operation).
CVE-2023-33038
Memory corruption while receiving a message in Bus Socket Transport Server.
CVE-2023-33119
Memory corruption while loading a VM from a signed VM image that is not coherent in the processor cache.
CVE-2024-33040
Memory corruption while invoking redundant release command to release one buffer from user space as race condition can occur in kernel space between buffer release and buffer access.
CVE-2024-33051
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.
CVE-2024-33056
Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
CVE-2024-43059
Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.
CVE-2024-45573
Memory corruption may occour while generating test pattern due to negative indexing of display ID.
CVE-2024-49842
Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions.
CVE-2024-53011
Information disclosure may occur due to improper permission and access controls to Video Analytics engine.
CVE-2023-43527
Information disclosure while parsing dts header atom in Video.
CVE-2024-33055
Memory corruption while invoking IOCTL calls to unmap the DMA buffers.
CVE-2024-38401
Memory corruption while processing concurrent IOCTL calls.
CVE-2024-38426
While processing the authentication message in UE, improper authentication may lead to information disclosure.
CVE-2024-45546
Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space.
CVE-2024-45554
Memory corruption during concurrent SSR execution due to race condition on the global maps list.
CVE-2024-45570
Memory corruption may occur during IO configuration processing when the IO port count is invalid.
CVE-2024-49841
Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling.
CVE-2023-43542
Memory corruption while copying a keyblobs material when the key materials size is not accurately checked.
CVE-2024-21461
Memory corruption while performing finish HMAC operation when context is freed by keymaster.
CVE-2024-21476
Memory corruption when the channel ID passed by user is not validated and further used.
CVE-2024-23369
Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers.
CVE-2024-23374
Memory corruption is possible when an attempt is made from userspace or console to write some haptics effects pattern to the haptics debugfs file.
CVE-2024-33067
Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver.
CVE-2024-33073
Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
CVE-2024-38410
Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice.
CVE-2024-38413
Memory corruption while processing frame packets.
CVE-2024-45561
Memory corruption while handling IOCTL call from user-space to set latency level.
CVE-2024-45566
Memory corruption during concurrent buffer access due to modification of the reference count.
CVE-2024-53023
Memory corruption may occur while accessing a variable during extended back to back tests.
CVE-2024-53033
Memory corruption while doing Escape call when user provides valid kernel address in the place of valid user buffer address.
CVE-2024-53034
Memory corruption occurs during an Escape call if an invalid Kernel Mode CPU event and sync object handle are passed with the DriverKnownEscape flag reset.
CVE-2023-43531
Memory corruption while verifying the serialized header when the key pairs are generated.
CVE-2024-38406
Memory corruption while handling IOCTL calls in JPEG Encoder driver.
CVE-2024-38412
Memory corruption while invoking IOCTL calls from user-space to kernel-space to handle session errors.