| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Memory corruption in Audio when SSR event is triggered after music playback is stopped. |
| Memory corruption while reading CPU state data during guest VM suspend. |
| Information disclosure while parsing the OCI IE with invalid length. |
| Memory corruption during management frame processing due to mismatch in T2LM info element. |
| Memory corruption while power-up or power-down sequence of the camera sensor. |
| Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace. |
| Memory corruption can occur in the camera when an invalid CID is used. |
| Memory corruption while parsing the memory map info in IOCTL calls. |
| Memory corruption while configuring a Hypervisor based input virtual device. |
| Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music |
| Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables |
| Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables |
| Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call. |
| Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND. |
| Memory corruption in DSP Services during a remote call from HLOS to DSP. |
| Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked. |
| Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization. |
| Information disclosure while handling T2LM Action Frame in WLAN Host. |
| Memory corruption when more scan frequency list or channels are sent from the user space. |
| Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command. |