Priority LOW 37
An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4_nat'
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00116 · Published 2024-11-26 · No fix listed CWE-126
Priority LOW 33
An image with a version lower than the fuse version may potentially be booted lead to improper authentication.
CVSS 3.1HIGH 7.8· Local · No auth · No interaction · EPSS 0.00107 · Published 2024-11-26 · No fix listed CWE-287
Priority LOW 32
Wrong configuration in Touch Pal application can collect user behavior data without awareness by the user.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00228 · Published 2024-11-26 · No fix listed CWE-16
Priority LOW 33
Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW
CVSS 3.1HIGH 7.8· Local · No auth · No interaction · EPSS 0.00116 · Published 2024-11-26 · No fix listed CWE-20
Priority MEDIUM 41
Initial xbl_sec revision does not have all the debug policy features and critical checks.
CVSS 3.1CRITICAL 9.8· Local · No auth · No interaction · EPSS 0.00098 · Published 2024-11-26 · No fix listed CWE-287
Priority LOW 35
Certain unprivileged processes are able to perform IOCTL calls.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00116 · Published 2024-11-22 · No fix listed CWE-264
Priority LOW 32
Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00109 · Published 2023-08-08 · No fix listed CWE-320
Priority MEDIUM 43
Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00427 · Published 2023-08-08 · No fix listed CWE-457
Priority MEDIUM 42
Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00364 · Published 2023-03-07 · No fix listed CWE-129
Priority LOW 35
Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00123 · Published 2023-03-07 · No fix listed CWE-704
Priority MEDIUM 48
Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00326 · Published 2023-03-07 · No fix listed CWE-415
Priority MEDIUM 40
Memory corruption in modem due to buffer overflow while processing a PPP packet
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00409 · Published 2023-03-07 · No fix listed CWE-121
Priority LOW 33
Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00125 · Published 2023-03-07 · No fix listed CWE-680
Priority LOW 37
Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00123 · Published 2023-03-07 · No fix listed CWE-823
Priority LOW 35
Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00123 · Published 2023-03-07 · No fix listed CWE-120
Priority LOW 26
Information Disclosure in Graphics during GPU context switch.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.0012 · Published 2023-03-07 · No fix listed CWE-200
Priority LOW 39
Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00424 · Published 2023-02-09 · No fix listed CWE-126
Priority LOW 33
Memory corruption due to configuration weakness in modem wile sending command to write protected files.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00123 · Published 2023-02-09 · No fix listed CWE-16
Priority MEDIUM 42
Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00375 · Published 2023-02-09 · No fix listed CWE-126
Priority LOW 36
Information disclosure in modem due to buffer over-red while performing checksum of packet received
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00375 · Published 2023-02-09 · No fix listed CWE-126
Priority LOW 39
Denial of service in modem due to missing null check while processing TCP or UDP packets from server
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00406 · Published 2023-02-09 · No fix listed CWE-476
Priority LOW 33
Denial of service in modem due to missing null check while processing IP packets with padding
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00406 · Published 2023-02-09 · No fix listed CWE-835
Priority LOW 39
Denial of service in modem due to null pointer dereference while processing DNS packets
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00406 · Published 2023-02-09 · No fix listed CWE-476
Priority MEDIUM 42
Information disclosure in modem due to buffer over read in dns client due to missing length check
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00375 · Published 2023-02-09 · No fix listed CWE-126
Priority MEDIUM 42
Information disclosure in modem due to buffer over-read while processing response from DNS server
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00375 · Published 2023-02-09 · No fix listed CWE-126
Load more
THREATIST.IORead the docs