CVE-2025-47392

all versions

Memory corruption when decoding corrupted satellite data files with invalid signature offsets.

8.8HIGH

CVE-2025-47383

all versions

Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.

7.2HIGH

CVE-2025-47371

all versions

Transient DOS when an LTE RLC packet with invalid TB is received by UE.

6.5MEDIUM

CVE-2025-47323

all versions

Memory corruption while routing GPR packets between user and root when handling large data packet.

7.8HIGH

CVE-2025-27034

all versions

Memory corruption while selecting the PLMN from SOR failed list.

9.8CRITICAL

CVE-2025-21482

all versions

Cryptographic issue while performing RSA PKCS padding decoding.

7.1HIGH

CVE-2025-21465

all versions

Information disclosure while processing the hash segment in an MBN file.

6.5MEDIUM

CVE-2025-21464

all versions

Information disclosure while reading data from an image using specified offset and size parameters.

6.5MEDIUM

CVE-2024-45549

all versions

Information disclosure while creating MQ channels.

7.7HIGH

CVE-2024-43046

all versions

There may be information disclosure during memory re-allocation in TZ Secure OS.

5.5MEDIUM

CVE-2024-38426

all versions

While processing the authentication message in UE, improper authentication may lead to information disclosure.

5.4MEDIUM

CVE-2024-33056

all versions

Memory corruption when allocating and accessing an entry in an SMEM partition continuously.

8.4HIGH

CVE-2024-23385

all versions

Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.

7.5HIGH

CVE-2024-23362

all versions

Cryptographic issue while parsing RSA keys in COBR format.

7.1HIGH

CVE-2024-23359

all versions

Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network.

8.2HIGH

CVE-2024-23353

all versions

Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.

7.5HIGH

CVE-2024-23352

all versions

Transient DOS when NAS receives ODAC criteria of length 1 and type 1 in registration accept OTA.

7.5HIGH

CVE-2024-21465

all versions

Memory corruption while processing key blob passed by the user.

7.8HIGH

CVE-2023-28578

all versions

Memory corruption in Core Services while executing the command for removing a single event listener.

9.3CRITICAL