Lucene search

K

58 matches found

CVE
CVE
added 2024/02/06 6:16 a.m.88 views

CVE-2023-43513

Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.

7.8CVSS7.7AI score0.00053EPSS
CVE
CVE
added 2024/04/01 3:15 p.m.87 views

CVE-2024-21468

Memory corruption when there is failed unmap operation in GPU.

8.4CVSS8.6AI score0.00044EPSS
CVE
CVE
added 2024/01/02 6:15 a.m.85 views

CVE-2023-33120

Memory corruption in Audio when memory map command is executed consecutively in ADSP.

7.8CVSS7.9AI score0.00136EPSS
CVE
CVE
added 2024/12/02 11:15 a.m.85 views

CVE-2024-43052

Memory corruption while processing API calls to NPU with invalid input.

7.8CVSS7.8AI score0.00041EPSS
CVE
CVE
added 2024/04/01 3:15 p.m.82 views

CVE-2023-33111

Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command.

5.5CVSS5.4AI score0.00035EPSS
CVE
CVE
added 2024/01/02 6:15 a.m.78 views

CVE-2023-33117

Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVCS_LOAD_MODULE command.

7.8CVSS7.8AI score0.0011EPSS
CVE
CVE
added 2024/01/02 6:15 a.m.77 views

CVE-2023-33094

Memory corruption while running VK synchronization with KASAN enabled.

8.4CVSS7.8AI score0.0006EPSS
CVE
CVE
added 2024/07/01 3:15 p.m.77 views

CVE-2024-23373

Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.

8.4CVSS8.3AI score0.00039EPSS
CVE
CVE
added 2024/01/02 6:15 a.m.76 views

CVE-2023-33110

The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.

7.8CVSS6.8AI score0.00085EPSS
CVE
CVE
added 2024/01/02 6:15 a.m.75 views

CVE-2023-33114

Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time.

8.4CVSS7.9AI score0.00112EPSS
CVE
CVE
added 2024/02/06 6:15 a.m.73 views

CVE-2023-33064

Transient DOS in Audio when invoking callback function of ASM driver.

5.5CVSS5.5AI score0.00024EPSS
CVE
CVE
added 2024/02/06 6:15 a.m.69 views

CVE-2023-33065

Information disclosure in Audio while accessing AVCS services from ADSP payload.

7.1CVSS6.8AI score0.00027EPSS
CVE
CVE
added 2024/05/06 3:15 p.m.69 views

CVE-2024-21475

Memory corruption when the payload received from firmware is not as per the expected protocol size.

7.8CVSS7.2AI score0.00082EPSS
CVE
CVE
added 2024/07/01 3:15 p.m.69 views

CVE-2024-23368

Memory corruption when allocating and accessing an entry in an SMEM partition.

7.8CVSS7.9AI score0.00035EPSS
CVE
CVE
added 2024/04/01 3:15 p.m.68 views

CVE-2023-33023

Memory corruption while processing finish_sign command to pass a rsp buffer.

8.4CVSS8.7AI score0.00044EPSS
CVE
CVE
added 2024/09/02 12:15 p.m.68 views

CVE-2024-33060

Memory corruption when two threads try to map and unmap a single node simultaneously.

8.4CVSS8.2AI score0.00019EPSS
CVE
CVE
added 2024/11/04 10:15 a.m.67 views

CVE-2024-38415

Memory corruption while handling session errors from firmware.

7.8CVSS7.9AI score0.00029EPSS
CVE
CVE
added 2024/09/02 12:15 p.m.66 views

CVE-2024-33042

Memory corruption when Alternative Frequency offset value is set to 255.

7.8CVSS7.8AI score0.00039EPSS
CVE
CVE
added 2024/04/01 3:15 p.m.65 views

CVE-2023-28547

Memory corruption in SPS Application while requesting for public key in sorter TA.

8.4CVSS8.7AI score0.00044EPSS
CVE
CVE
added 2024/05/06 3:15 p.m.65 views

CVE-2023-43521

Memory corruption when multiple listeners are being registered with the same file descriptor.

7.8CVSS7.1AI score0.00024EPSS
CVE
CVE
added 2024/02/06 6:16 a.m.64 views

CVE-2023-33068

Memory corruption in Audio while processing IIR config data from AFE calibration block.

7.8CVSS7.8AI score0.0002EPSS
CVE
CVE
added 2024/02/06 6:16 a.m.64 views

CVE-2023-43518

Memory corruption in video while parsing invalid mp2 clip.

9.8CVSS9.5AI score0.00107EPSS
CVE
CVE
added 2024/09/02 12:15 p.m.64 views

CVE-2024-33052

Memory corruption when user provides data for FM HCI command control operations.

7.8CVSS8AI score0.00039EPSS
CVE
CVE
added 2024/03/04 11:15 a.m.63 views

CVE-2023-33066

Memory corruption in Audio while processing RT proxy port register driver.

8.4CVSS8.6AI score0.00051EPSS
CVE
CVE
added 2024/03/04 11:15 a.m.62 views

CVE-2023-28578

Memory corruption in Core Services while executing the command for removing a single event listener.

9.3CVSS9.6AI score0.00082EPSS
CVE
CVE
added 2024/01/02 6:15 a.m.62 views

CVE-2023-33085

Memory corruption in wearables while processing data from AON.

7.8CVSS7.8AI score0.0006EPSS
CVE
CVE
added 2024/02/06 6:16 a.m.61 views

CVE-2023-33067

Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points.

7.8CVSS7.9AI score0.0002EPSS
CVE
CVE
added 2024/02/06 6:16 a.m.61 views

CVE-2023-43519

Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size.

9.8CVSS9.5AI score0.00107EPSS
CVE
CVE
added 2024/01/02 6:15 a.m.60 views

CVE-2023-33033

Memory corruption in Audio during playback with speaker protection.

8.4CVSS7.8AI score0.0006EPSS
CVE
CVE
added 2024/02/06 6:16 a.m.60 views

CVE-2023-33069

Memory corruption in Audio while processing the calibration data returned from ACDB loader.

7.8CVSS7.8AI score0.0002EPSS
CVE
CVE
added 2024/11/04 10:15 a.m.60 views

CVE-2024-38422

Memory corruption while processing voice packet with arbitrary data received from ADSP.

7.8CVSS7.9AI score0.00029EPSS
CVE
CVE
added 2024/03/04 11:15 a.m.59 views

CVE-2023-43548

Memory corruption while parsing qcp clip with invalid chunk data size.

9.8CVSS7.4AI score0.00106EPSS
CVE
CVE
added 2024/05/06 3:15 p.m.59 views

CVE-2024-21471

Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.

8.4CVSS7.2AI score0.00082EPSS
CVE
CVE
added 2024/09/02 12:15 p.m.59 views

CVE-2024-33043

Transient DOS while handling PS event when Program Service name length offset value is set to 255.

5.5CVSS5.5AI score0.00036EPSS
CVE
CVE
added 2024/01/02 6:15 a.m.58 views

CVE-2023-28583

Memory corruption when IPv6 prefix timer object`s lifetime expires which are created while Netmgr daemon gets an IPv6 address.

7.8CVSS7.8AI score0.00041EPSS
CVE
CVE
added 2024/06/03 10:15 a.m.58 views

CVE-2023-43551

Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.

9.1CVSS9.4AI score0.00111EPSS
CVE
CVE
added 2024/01/02 6:15 a.m.57 views

CVE-2023-33030

Memory corruption in HLOS while running playready use-case.

9.3CVSS7.8AI score0.0006EPSS
CVE
CVE
added 2024/01/02 6:15 a.m.57 views

CVE-2023-33118

Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL.

7.8CVSS7.9AI score0.0011EPSS
CVE
CVE
added 2024/12/02 11:15 a.m.57 views

CVE-2024-33036

Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access.

6.7CVSS6.6AI score0.00015EPSS
CVE
CVE
added 2024/02/06 6:16 a.m.56 views

CVE-2023-33077

Memory corruption in HLOS while converting from authorization token to HIDL vector.

7.8CVSS7.7AI score0.0002EPSS
CVE
CVE
added 2024/10/07 1:15 p.m.55 views

CVE-2024-23375

Memory corruption during the network scan request.

6.7CVSS6.8AI score0.00028EPSS
CVE
CVE
added 2024/12/02 11:15 a.m.55 views

CVE-2024-33044

Memory corruption while Configuring the SMR/S2CR register in Bypass mode.

8.4CVSS8.6AI score0.00027EPSS
CVE
CVE
added 2024/11/04 10:15 a.m.55 views

CVE-2024-38423

Memory corruption while processing GPU page table switch.

7.8CVSS7.9AI score0.00029EPSS
CVE
CVE
added 2024/12/02 11:15 a.m.47 views

CVE-2024-33040

Memory corruption while invoking redundant release command to release one buffer from user space as race condition can occur in kernel space between buffer release and buffer access.

7CVSS6.8AI score0.00016EPSS
CVE
CVE
added 2024/07/01 3:15 p.m.45 views

CVE-2024-21461

Memory corruption while performing finish HMAC operation when context is freed by keymaster.

8.4CVSS8.3AI score0.00035EPSS
CVE
CVE
added 2024/05/06 3:15 p.m.44 views

CVE-2023-43527

Information disclosure while parsing dts header atom in Video.

6.8CVSS6.7AI score0.00047EPSS
CVE
CVE
added 2024/05/06 3:15 p.m.43 views

CVE-2023-43528

Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size.

6.1CVSS6.6AI score0.00041EPSS
CVE
CVE
added 2024/09/02 12:15 p.m.43 views

CVE-2024-38401

Memory corruption while processing concurrent IOCTL calls.

7.8CVSS7.9AI score0.00039EPSS
CVE
CVE
added 2024/08/05 3:15 p.m.41 views

CVE-2024-33027

Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table.

8.4CVSS8.5AI score0.00029EPSS
CVE
CVE
added 2024/11/04 10:15 a.m.39 views

CVE-2024-23385

Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.

7.5CVSS7AI score0.00056EPSS
Total number of security vulnerabilities58