CVE-2025-21424

Memory corruption while calling the NPU driver APIs concurrently.

CVE-2023-33021

Memory corruption in Graphics while processing user packets for command submission.

CVE-2023-28562

Memory corruption while handling payloads from remote ESL.

CVE-2023-28584

Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement (CSA).

CVE-2024-33042

Memory corruption when Alternative Frequency offset value is set to 255.

CVE-2024-33052

Memory corruption when user provides data for FM HCI command control operations.

CVE-2024-53014

Memory corruption may occur while validating ports and channels in Audio driver.

CVE-2023-33066

Memory corruption in Audio while processing RT proxy port register driver.

CVE-2024-33043

Transient DOS while handling PS event when Program Service name length offset value is set to 255.

CVE-2023-28567

Memory corruption in WLAN HAL while handling command through WMI interfaces.

CVE-2023-28564

Memory corruption in WLAN HAL while passing command parameters through WMI interfaces.

CVE-2023-28565

Memory corruption in WLAN HAL while handling command streams through WMI interfaces.

CVE-2024-33044

Memory corruption while Configuring the SMR/S2CR register in Bypass mode.

CVE-2024-33056

Memory corruption when allocating and accessing an entry in an SMEM partition continuously.

CVE-2024-33027

Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table.

CVE-2024-33051

Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.

CVE-2024-33014

Transient DOS while parsing ESP IE from beacon/probe response frame.

CVE-2024-43051

Information disclosure while deriving keys for a session for any Widevine use case.

CVE-2024-43056

Transient DOS during hypervisor virtual I/O operation in a virtual machine.