CVE-2024-38415

Memory corruption while handling session errors from firmware.

CVE-2024-23377

Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver.

CVE-2024-38408

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.

CVE-2024-38424

Memory corruption during GNSS HAL process initialization.