CVE-2024-21468

Memory corruption when there is failed unmap operation in GPU.

CVE-2024-33060

Memory corruption when two threads try to map and unmap a single node simultaneously.

CVE-2024-53027

Transient DOS may occur while processing the country IE.

CVE-2023-33023

Memory corruption while processing finish_sign command to pass a rsp buffer.

CVE-2024-33042

Memory corruption when Alternative Frequency offset value is set to 255.

CVE-2024-38416

Information disclosure during audio playback.

CVE-2023-28547

Memory corruption in SPS Application while requesting for public key in sorter TA.

CVE-2024-33052

Memory corruption when user provides data for FM HCI command control operations.

CVE-2023-33066

Memory corruption in Audio while processing RT proxy port register driver.

CVE-2024-21471

Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.

CVE-2023-43551

Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.

CVE-2024-45555

Memory corruption can occur if an already verified IFS2 image is overwritten, bypassing boot verification. This allows unauthorized programs to be injected into security-sensitive images, enabling the booting of a tampered IFS2 system image.

CVE-2024-45562

Memory corruption during concurrent access to server info object due to unprotected critical field.

CVE-2024-33051

Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.

CVE-2023-43528

Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size.

CVE-2024-33067

Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver.

CVE-2024-53030

Memory corruption while processing input message passed from FE driver.

CVE-2023-43555

Information disclosure in Video while parsing mp2 clip with invalid section length.

CVE-2025-21454

Transient DOS while processing received beacon frame.

CVE-2025-21427

Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.

CVE-2025-21449

Transient DOS may occur while processing malformed length field in SSID IEs.