CVE-2025-47404

all versions

Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.

6.5MEDIUM

CVE-2025-27061

all versions

Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmwar

7.8HIGH

CVE-2025-27042

all versions

Memory corruption while processing video packets received from video firmware.

7.8HIGH

CVE-2025-21454

all versions

Transient DOS while processing received beacon frame.

7.5HIGH

CVE-2025-21449

all versions

Transient DOS may occur while processing malformed length field in SSID IEs.

7.5HIGH

CVE-2025-21433

all versions

Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.

6.2MEDIUM

CVE-2025-21432

all versions

Memory corruption while retrieving the CBOR data from TA.

7.8HIGH

CVE-2025-21467

all versions

Memory corruption while reading the FW response from the shared queue.

7.8HIGH

CVE-2025-21453

all versions

Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures oc

7.8HIGH

CVE-2024-49835

all versions

Memory corruption while reading secure file.

7.8HIGH

CVE-2024-33060

all versions

Memory corruption when two threads try to map and unmap a single node simultaneously.

8.4HIGH

CVE-2024-33052

all versions

Memory corruption when user provides data for FM HCI command control operations.

7.8HIGH

CVE-2023-43555

all versions

Information disclosure in Video while parsing mp2 clip with invalid section length.

8.2HIGH

CVE-2023-43551

all versions

Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immedia

9.1CRITICAL

CVE-2024-21475

all versions

Memory corruption when the payload received from firmware is not as per the expected protocol size.

7.8HIGH

CVE-2023-43529

all versions

Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received.

7.5HIGH

CVE-2024-21468

all versions

Memory corruption when there is failed unmap operation in GPU.

8.4HIGH

CVE-2023-33101

all versions

Transient DOS while processing DL NAS TRANSPORT message with payload length 0.

7.5HIGH

CVE-2023-33099

all versions

Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR.

7.5HIGH

CVE-2023-33023

all versions

Memory corruption while processing finish_sign command to pass a rsp buffer.

8.4HIGH

CVE-2023-28547

all versions

Memory corruption in SPS Application while requesting for public key in sorter TA.

8.4HIGH

CVE-2023-43548

all versions

Memory corruption while parsing qcp clip with invalid chunk data size.

7.3HIGH

CVE-2023-33104

all versions

Transient DOS while processing PDU Release command with a parameter PDU ID out of range.

7.5HIGH

CVE-2023-33096

all versions

Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16.

7.5HIGH

CVE-2023-33095

all versions

Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in

7.5HIGH

CVE-2023-33086

all versions

Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers.

7.5HIGH

CVE-2023-33066

all versions

Memory corruption in Audio while processing RT proxy port register driver.

8.4HIGH

CVE-2023-28578

all versions

Memory corruption in Core Services while executing the command for removing a single event listener.

9.3CRITICAL