CVE-2026-25266

all versions

Memory corruption while processing IOCTL command when device is in power-save state.

5.5MEDIUM

CVE-2026-24082

all versions

Memory Corruption when copying data from a freed source while executing performance counter deselect operation.

7.8HIGH

CVE-2025-47407

all versions

Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.

7.8HIGH

CVE-2025-47403

all versions

Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.

6.5MEDIUM

CVE-2025-47401

all versions

Transient DOS when processing target power rate tables during channel configuration.

6.5MEDIUM

CVE-2025-47398

all versions

Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.

7.8HIGH

CVE-2025-47397

all versions

Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.

7.8HIGH

CVE-2025-47366

all versions

Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.

7.1HIGH

CVE-2025-27061

all versions

Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmwar

7.8HIGH

CVE-2025-27057

all versions

Transient DOS while handling beacon frames with invalid IE header length.

7.5HIGH

CVE-2025-27052

all versions

Memory corruption while processing data packets in diag received from Unix clients.

7.8HIGH

CVE-2025-27043

all versions

Memory corruption while processing manipulated payload in video firmware.

7.8HIGH

CVE-2025-27042

all versions

Memory corruption while processing video packets received from video firmware.

7.8HIGH

CVE-2025-21454

all versions

Transient DOS while processing received beacon frame.

7.5HIGH

CVE-2025-21449

all versions

Transient DOS may occur while processing malformed length field in SSID IEs.

7.5HIGH

CVE-2025-21446

all versions

Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.

7.5HIGH

CVE-2025-21433

all versions

Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.

6.2MEDIUM

CVE-2025-21432

all versions

Memory corruption while retrieving the CBOR data from TA.

7.8HIGH

CVE-2025-21422

all versions

Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses.

7.1HIGH

CVE-2024-53009

all versions

Memory corruption while operating the mailbox in Automotive.

5.3MEDIUM

CVE-2025-21479

all versions

Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

8.6HIGH

CVE-2025-21480

all versions

Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

8.6HIGH

CVE-2025-21468

all versions

Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null

7.8HIGH

CVE-2025-21459

all versions

Transient DOS while parsing per STA profile in ML IE.

7.5HIGH

CVE-2024-49845

all versions

Memory corruption during the FRS UDS generation process.

7.8HIGH

CVE-2024-49844

all versions

Memory corruption while triggering commands in the PlayReady Trusted application.

7.8HIGH

CVE-2024-49842

all versions

Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions.

7.8HIGH

CVE-2024-49841

all versions

Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling.

7.8HIGH

CVE-2024-49835

all versions

Memory corruption while reading secure file.

7.8HIGH

CVE-2024-53024

all versions

Memory corruption in display driver while detaching a device.

7.8HIGH

CVE-2024-53014

all versions

Memory corruption may occur while validating ports and channels in Audio driver.

7.8HIGH

CVE-2024-45580

all versions

Memory corruption while handling multuple IOCTL calls from userspace for remote invocation.

7.8HIGH

CVE-2024-43056

all versions

Transient DOS during hypervisor virtual I/O operation in a virtual machine.

5.5MEDIUM

CVE-2024-43051

all versions

Information disclosure while deriving keys for a session for any Widevine use case.

5.5MEDIUM

CVE-2024-49839

all versions

Memory corruption during management frame processing due to mismatch in T2LM info element.

8.2HIGH

CVE-2024-49838

all versions

Information disclosure while parsing the OCI IE with invalid length.

8.2HIGH

CVE-2024-49834

all versions

Memory corruption while power-up or power-down sequence of the camera sensor.

7.8HIGH

CVE-2024-49833

all versions

Memory corruption can occur in the camera when an invalid CID is used.

7.8HIGH

CVE-2024-38420

all versions

Memory corruption while configuring a Hypervisor based input virtual device.

8.8HIGH

CVE-2024-45553

all versions

Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list whil

7.8HIGH