CVE-2025-21460

Memory corruption while processing a message, when the buffer is controlled by a Guest VM, the value can be changed continuously.

CVE-2024-45555

Memory corruption can occur if an already verified IFS2 image is overwritten, bypassing boot verification. This allows unauthorized programs to be injected into security-sensitive images, enabling the booting of a tampered IFS2 system image.

CVE-2024-49845

Memory corruption during the FRS UDS generation process.

CVE-2024-49847

Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE.

CVE-2024-38397

Transient DOS while parsing probe response and assoc response frame.

CVE-2024-21469

Memory corruption when an invoke call and a TEE call are bound for the same trusted application.

CVE-2024-45562

Memory corruption during concurrent access to server info object due to unprotected critical field.

CVE-2024-49844

Memory corruption while triggering commands in the PlayReady Trusted application.

CVE-2024-43064

Uncontrolled resource consumption when a driver, an application or a SMMU client tries to access the global registers through SMMU.

CVE-2024-45564

Memory corruption during concurrent access to server info object due to incorrect reference count update.

CVE-2024-49837

Memory corruption while reading CPU state data during guest VM suspend.

CVE-2024-33056

Memory corruption when allocating and accessing an entry in an SMEM partition continuously.

CVE-2024-49846

Memory corruption while decoding of OTA messages from T3448 IE.

CVE-2024-53012

Memory corruption may occur due to improper input validation in clock device.

CVE-2024-33051

Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.

CVE-2024-45581

Memory corruption while sound model registration for voice activation with audio kernel driver.

CVE-2024-49842

Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions.

CVE-2024-53011

Information disclosure may occur due to improper permission and access controls to Video Analytics engine.

CVE-2024-49841

Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling.

CVE-2024-21461

Memory corruption while performing finish HMAC operation when context is freed by keymaster.

CVE-2024-33073

Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.

CVE-2024-53023

Memory corruption may occur while accessing a variable during extended back to back tests.

CVE-2024-53031

Memory corruption while reading a type value from a buffer controlled by the Guest Virtual Machine.

CVE-2024-49830

Memory corruption while processing an IOCTL call to set mixer controls.

CVE-2024-53013

Memory corruption may occur while processing voice call registration with user.

CVE-2024-53028

Memory corruption may occur while processing message from frontend during allocation.

CVE-2024-53029

Memory corruption while reading a value from a buffer controlled by the Guest Virtual Machine.

CVE-2025-21442

Memory corruption while transmitting packet mapping information with invalid header payload size.

CVE-2024-45584

Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace.

CVE-2024-53032

Memory corruption may occur in keyboard virtual device due to guest VM interaction.

CVE-2024-21462

Transient DOS while loading the TA ELF file.

CVE-2024-43051

Information disclosure while deriving keys for a session for any Widevine use case.

CVE-2024-53030

Memory corruption while processing input message passed from FE driver.

CVE-2025-21443

Memory corruption while processing message content in eAVB.

CVE-2025-21437

Memory corruption while processing memory map or unmap IOCTL operations simultaneously.

CVE-2024-38419

Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.

CVE-2024-38408

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.

CVE-2025-21431

Information disclosure may be there when a guest VM is connected.

CVE-2024-38424

Memory corruption during GNSS HAL process initialization.

CVE-2025-21425

Memory corruption may occur due top improper access control in HAB process.

CVE-2024-33068

Transient DOS while parsing fragments of MBSSID IE from beacon frame.

CVE-2024-23357

Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus.

CVE-2025-27057

Transient DOS while handling beacon frames with invalid IE header length.

CVE-2025-27061

Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.

CVE-2024-23356

Memory corruption during session sign renewal request calls in HLOS.

CVE-2025-27042

Memory corruption while processing video packets received from video firmware.

CVE-2025-27043

Memory corruption while processing manipulated payload in video firmware.

CVE-2024-23355

Memory corruption when keymaster operation imports a shared key.

CVE-2024-33021

Memory corruption while processing IOCTL call to set metainfo.

CVE-2025-21450

Cryptographic issue occurs due to use of insecure connection method while downloading.