CVE-2025-47345

all versions

Cryptographic issue may occur while encrypting license data.

8.4HIGH

CVE-2025-27034

all versions

Memory corruption while selecting the PLMN from SOR failed list.

9.8CRITICAL

CVE-2025-27032

all versions

memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.

7.8HIGH

CVE-2025-21482

all versions

Cryptographic issue while performing RSA PKCS padding decoding.

7.1HIGH

CVE-2025-21465

all versions

Information disclosure while processing the hash segment in an MBN file.

6.5MEDIUM

CVE-2025-21464

all versions

Information disclosure while reading data from an image using specified offset and size parameters.

6.5MEDIUM

CVE-2025-21450

all versions

Cryptographic issue occurs due to use of insecure connection method while downloading.

9.1CRITICAL

CVE-2025-21422

all versions

Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses.

7.1HIGH

CVE-2024-53009

all versions

Memory corruption while operating the mailbox in Automotive.

5.3MEDIUM

CVE-2024-53010

all versions

Memory corruption may occur while attaching VM when the HLOS retains access to VM.

7.8HIGH

CVE-2024-49847

all versions

Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE.

7.5HIGH

CVE-2024-49846

all versions

Memory corruption while decoding of OTA messages from T3448 IE.

8.2HIGH

CVE-2024-49842

all versions

Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions.

7.8HIGH

CVE-2024-49841

all versions

Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling.

7.8HIGH

CVE-2024-45549

all versions

Information disclosure while creating MQ channels.

7.7HIGH

CVE-2024-43046

all versions

There may be information disclosure during memory re-allocation in TZ Secure OS.

5.5MEDIUM

CVE-2024-33058

all versions

Memory corruption while assigning memory from the source DDR memory(HLOS) to ADSP.

7.5HIGH

CVE-2024-43056

all versions

Transient DOS during hypervisor virtual I/O operation in a virtual machine.

5.5MEDIUM

CVE-2024-38426

all versions

While processing the authentication message in UE, improper authentication may lead to information disclosure.

5.4MEDIUM

CVE-2024-38420

all versions

Memory corruption while configuring a Hypervisor based input virtual device.

8.8HIGH

CVE-2024-38404

all versions

Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem.

7.5HIGH