CVE-2024-23353

Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.

CVE-2025-21450

Cryptographic issue occurs due to use of insecure connection method while downloading.

CVE-2025-21422

Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses.

CVE-2025-27052

Memory corruption while processing data packets in diag received from Unix clients.

CVE-2024-53009

Memory corruption while operating the mailbox in Automotive.

CVE-2025-21427

Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.

CVE-2025-21432

Memory corruption while retrieving the CBOR data from TA.

CVE-2025-21433

Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.

CVE-2025-21446

Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.

CVE-2025-21452

Transient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE network.

CVE-2025-27065

Transient DOS while processing a frame with malformed shared-key descriptor.

CVE-2025-27073

Transient DOS while creating NDP instance.

CVE-2025-21477

Transient DOS while processing CCCH data when NW sends data with invalid length.

CVE-2025-21461

Memory corruption when programming registers through virtual CDM.

CVE-2025-21481

Memory corruption while performing private key encryption in trusted application.

CVE-2025-47329

Memory corruption while handling invalid inputs in application info setup.

CVE-2025-47317

Memory corruption due to global buffer overflow when a test command uses an invalid payload type.

CVE-2025-47326

Transient DOS while handling command data during power control processing.

CVE-2025-47328

Transient DOS while processing power control requests with invalid antenna or stream values.