CVE-2025-21465

all versions

Information disclosure while processing the hash segment in an MBN file.

6.5MEDIUM

CVE-2025-21464

all versions

Information disclosure while reading data from an image using specified offset and size parameters.

6.5MEDIUM

CVE-2024-45556

all versions

Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.

6.5MEDIUM

CVE-2024-43046

all versions

There may be information disclosure during memory re-allocation in TZ Secure OS.

5.5MEDIUM

CVE-2024-33016

all versions

memory corruption when an invalid firehose patch command is invoked.

6.8MEDIUM

CVE-2024-21462

all versions

Transient DOS while loading the TA ELF file.

7.1HIGH

CVE-2024-23363

all versions

Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame.

7.5HIGH

CVE-2023-43537

all versions

Information disclosure while handling T2LM Action Frame in WLAN Host.

6.5MEDIUM

CVE-2024-21477

all versions

Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame.

7.5HIGH

CVE-2023-43553

all versions

Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE.

9.8CRITICAL

CVE-2023-43552

all versions

Memory corruption while processing MBSSID beacon containing several subelement IE.

9.8CRITICAL

CVE-2023-43549

all versions

Memory corruption while processing TPC target power table in FTM TPC.

8.4HIGH

CVE-2023-43539

all versions

Transient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame.

7.5HIGH

CVE-2023-33105

all versions

Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction seque

7.5HIGH

CVE-2023-43523

all versions

Transient DOS while processing 11AZ RTT management action frame received through OTA.

7.5HIGH

CVE-2023-33072

all versions

Memory corruption in Core while processing control functions.

9.3CRITICAL

CVE-2023-43511

all versions

Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains IPPROTO_NONE as the n

7.5HIGH

CVE-2023-33116

all versions

Transient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver.

7.5HIGH

CVE-2023-33109

all versions

Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.

7.5HIGH

CVE-2023-33062

all versions

Transient DOS in WLAN Firmware while parsing a BTM request.

7.5HIGH

CVE-2023-33098

all versions

Transient DOS while parsing WPA IES, when it is passed with length more than expected size.

7.5HIGH

CVE-2023-33097

all versions

Transient DOS in WLAN Firmware while processing a FTMR frame.

7.5HIGH

CVE-2023-33089

all versions

Transient DOS when processing a NULL buffer while parsing WLAN vdev.

7.5HIGH

CVE-2023-33088

all versions

Memory corruption when processing cmd parameters while parsing vdev.

8.4HIGH

CVE-2023-33083

all versions

Memory corruption in WLAN Host while processing RRM beacon on the AP.

9.8CRITICAL

CVE-2023-33082

all versions

Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE.

9.8CRITICAL

CVE-2023-33081

all versions

Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast.

7.5HIGH

CVE-2023-33080

all versions

Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.

7.5HIGH

CVE-2023-33053

all versions

Memory corruption in Kernel while parsing metadata.

8.4HIGH

CVE-2023-33041

all versions

Under certain scenarios the WLAN Firmware will reach an assertion due to state confusion while looking up peer ids.

7.5HIGH

CVE-2023-28586

all versions

Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.

6.0MEDIUM

CVE-2023-28585

all versions

Memory corruption while loading an ELF segment in TEE Kernel.

8.2HIGH

CVE-2023-33061

all versions

Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame.

7.5HIGH

CVE-2023-33056

all versions

Transient DOS in WLAN Firmware when firmware receives beacon including T2LM IE.

7.5HIGH

CVE-2023-33048

all versions

Transient DOS in WLAN Firmware while parsing t2lm buffers.

7.5HIGH

CVE-2023-33047

all versions

Transient DOS in WLAN Firmware while parsing no-inherit IES.

7.5HIGH

CVE-2023-33045

all versions

Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute.

9.8CRITICAL

CVE-2023-24852

all versions

Memory Corruption in Core due to secure memory access by user while loading modem image.

8.4HIGH

CVE-2023-33028

all versions

Memory corruption in WLAN Firmware while doing a memory copy of pmk cache.

9.8CRITICAL

CVE-2023-33027

all versions

Transient DOS in WLAN Firmware while parsing rsn ies.

7.5HIGH

CVE-2023-33026

all versions

Transient DOS in WLAN Firmware while parsing a NAN management frame.

7.5HIGH