Priority MEDIUM 43
A malformed DLC can trigger Memory Corruption in SNPE library due to out of bounds read, such as by loading an untrusted model (e.g.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00364 · Published 2023-09-05 · No fix listed CWE-125
Priority LOW 37
Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00116 · Published 2023-09-05 · No fix listed CWE-121
Priority LOW 35
Memory Corruption in Core Platform while printing the response buffer in log.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00116 · Published 2023-09-05 · No fix listed CWE-120
Priority LOW 35
Memory corruption in Core Platform while printing the response buffer in log.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00116 · Published 2023-09-05 · No fix listed CWE-120
Priority LOW 35
Memory corruption while allocating memory in COmxApeDec module in Audio.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00116 · Published 2023-08-08 · No fix listed CWE-190
Priority LOW 35
Memory Corruption in Audio while playing amrwbplus clips with modified content.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00116 · Published 2023-08-08 · No fix listed CWE-190
Priority MEDIUM 41
Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.
CVSS 3.1CRITICAL 9.3· Local · No auth · No interaction · EPSS 0.00116 · Published 2023-08-08 · No fix listed CWE-704
Priority LOW 32
Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00109 · Published 2023-08-08 · No fix listed CWE-320
Priority MEDIUM 43
Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00427 · Published 2023-08-08 · No fix listed CWE-457
Priority MEDIUM 42
Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00364 · Published 2023-03-07 · No fix listed CWE-129
Priority LOW 35
Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00123 · Published 2023-03-07 · No fix listed CWE-704
Priority MEDIUM 48
Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00326 · Published 2023-03-07 · No fix listed CWE-415
Priority MEDIUM 41
Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone.
CVSS 3.1CRITICAL 9.3· Local · No auth · No interaction · EPSS 0.00087 · Published 2023-03-07 · No fix listed CWE-367
Priority MEDIUM 40
Memory corruption in modem due to buffer overflow while processing a PPP packet
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00409 · Published 2023-03-07 · No fix listed CWE-121
Priority LOW 33
Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00125 · Published 2023-03-07 · No fix listed CWE-680
Priority LOW 37
Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00123 · Published 2023-03-07 · No fix listed CWE-823
Priority LOW 35
Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00123 · Published 2023-03-07 · No fix listed CWE-120
Priority LOW 26
Information Disclosure in Graphics during GPU context switch.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.0012 · Published 2023-03-07 · No fix listed CWE-200
Priority MEDIUM 43
Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00475 · Published 2023-02-09 · No fix listed CWE-120
Priority LOW 39
Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00424 · Published 2023-02-09 · No fix listed CWE-126
Priority LOW 35
Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00123 · Published 2023-02-09 · No fix listed CWE-120
Priority MEDIUM 42
Information disclosure due to buffer over-read in WLAN while parsing NMF frame.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00375 · Published 2023-02-09 · No fix listed CWE-126
Priority LOW 33
Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00125 · Published 2023-02-09 · No fix listed CWE-680
Priority LOW 35
Memory corruption due to improper access control in Qualcomm IPC.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00107 · Published 2023-02-09 · No fix listed CWE-284
Priority LOW 33
Memory corruption due to configuration weakness in modem wile sending command to write protected files.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00123 · Published 2023-02-09 · No fix listed CWE-16
Load more