CVE-2025-21454

all versions

Transient DOS while processing received beacon frame.

7.5HIGH

CVE-2025-21449

all versions

Transient DOS may occur while processing malformed length field in SSID IEs.

7.5HIGH

CVE-2025-21427

all versions

Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.

8.2HIGH

CVE-2024-45562

all versions

Memory corruption during concurrent access to server info object due to unprotected critical field.

6.6MEDIUM

CVE-2024-53030

all versions

Memory corruption while processing input message passed from FE driver.

7.8HIGH

CVE-2024-53027

all versions

Transient DOS may occur while processing the country IE.

7.5HIGH

CVE-2024-38416

all versions

Information disclosure during audio playback.

6.1MEDIUM

CVE-2024-45555

all versions

Memory corruption can occur if an already verified IFS2 image is overwritten, bypassing boot verification. This allows unauthorize

8.4HIGH

CVE-2024-33067

all versions

Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound

6.1MEDIUM

CVE-2024-33060

all versions

Memory corruption when two threads try to map and unmap a single node simultaneously.

8.4HIGH

CVE-2024-33052

all versions

Memory corruption when user provides data for FM HCI command control operations.

7.8HIGH

CVE-2024-33051

all versions

Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.

7.5HIGH

CVE-2024-33042

all versions

Memory corruption when Alternative Frequency offset value is set to 255.

7.8HIGH

CVE-2023-43555

all versions

Information disclosure in Video while parsing mp2 clip with invalid section length.

8.2HIGH

CVE-2023-43551

all versions

Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immedia

9.1CRITICAL

CVE-2024-21471

all versions

Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.

8.4HIGH

CVE-2023-43528

all versions

Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than

6.1MEDIUM

CVE-2024-21468

all versions

Memory corruption when there is failed unmap operation in GPU.

8.4HIGH

CVE-2023-33023

all versions

Memory corruption while processing finish_sign command to pass a rsp buffer.

8.4HIGH

CVE-2023-28547

all versions

Memory corruption in SPS Application while requesting for public key in sorter TA.

8.4HIGH

CVE-2023-33066

all versions

Memory corruption in Audio while processing RT proxy port register driver.

8.4HIGH