CVE-2025-21424

Memory corruption while calling the NPU driver APIs concurrently.

CVE-2024-21468

Memory corruption when there is failed unmap operation in GPU.

CVE-2024-38402

Memory corruption while processing IOCTL call for getting group info.

CVE-2025-21467

Memory corruption while reading the FW response from the shared queue.

CVE-2023-43550

Memory corruption while processing a QMI request for allocating memory from a DHMS supported subsystem.

CVE-2023-43546

Memory corruption while invoking HGSL IOCTL context create.

CVE-2025-21468

Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer.

CVE-2023-43547

Memory corruption while invoking IOCTLs calls in Automotive Multimedia.

CVE-2024-23354

Memory corruption when the IOCTL call is interrupted by a signal.

CVE-2024-49843

Memory corruption while processing IOCTL from user space to handle GPU AHB bus error.

CVE-2024-21475

Memory corruption when the payload received from firmware is not as per the expected protocol size.

CVE-2024-23351

Memory corruption as GPU registers beyond the last protected range can be accessed through LPAC submissions.

CVE-2024-33060

Memory corruption when two threads try to map and unmap a single node simultaneously.

CVE-2024-53027

Transient DOS may occur while processing the country IE.

CVE-2024-49834

Memory corruption while power-up or power-down sequence of the camera sensor.

CVE-2023-33023

Memory corruption while processing finish_sign command to pass a rsp buffer.

CVE-2024-49838

Information disclosure while parsing the OCI IE with invalid length.

CVE-2024-21463

Memory corruption while processing Codec2 during v13k decoder pitch synthesis.

CVE-2025-21453

Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.

CVE-2024-53024

Memory corruption in display driver while detaching a device.

CVE-2023-28547

Memory corruption in SPS Application while requesting for public key in sorter TA.

CVE-2023-43521

Memory corruption when multiple listeners are being registered with the same file descriptor.

CVE-2024-33050

Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.

CVE-2024-45553

Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it for a process-specific task, issues may arise.

CVE-2024-53014

Memory corruption may occur while validating ports and channels in Audio driver.

CVE-2023-28578

Memory corruption in Core Services while executing the command for removing a single event listener.

CVE-2024-21471

Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.

CVE-2023-43548

Memory corruption while parsing qcp clip with invalid chunk data size.

CVE-2023-33086

Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers.

CVE-2023-43551

Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.

CVE-2024-45564

Memory corruption during concurrent access to server info object due to incorrect reference count update.

CVE-2024-21480

Memory corruption while playing audio file having large-sized input buffer.

CVE-2024-45562

Memory corruption during concurrent access to server info object due to unprotected critical field.

CVE-2024-45576

Memory corruption while prociesing command buffer buffer in OPE module.

CVE-2024-49846

Memory corruption while decoding of OTA messages from T3448 IE.

CVE-2024-33051

Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.

CVE-2024-45570

Memory corruption may occur during IO configuration processing when the IO port count is invalid.

CVE-2023-43527

Information disclosure while parsing dts header atom in Video.

CVE-2024-38401

Memory corruption while processing concurrent IOCTL calls.

CVE-2024-53023

Memory corruption may occur while accessing a variable during extended back to back tests.

CVE-2023-43531

Memory corruption while verifying the serialized header when the key pairs are generated.

CVE-2024-38418

Memory corruption while parsing the memory map info in IOCTL calls.

CVE-2024-45584

Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace.

CVE-2024-38414

Information disclosure while processing information on firmware image during core initialization.

CVE-2024-43057

Memory corruption while processing command in Glink linux.

CVE-2023-43529

Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received.

CVE-2023-43543

Memory corruption in Audio during a playback or a recording due to race condition between allocation and deallocation of graph object.

CVE-2023-43555

Information disclosure in Video while parsing mp2 clip with invalid section length.

CVE-2023-43544

Memory corruption when IPC callback handle is used after it has been released during register callback by another thread.

CVE-2025-21450

Cryptographic issue occurs due to use of insecure connection method while downloading.