CVE-2026-24082

all versions

Memory Corruption when copying data from a freed source while executing performance counter deselect operation.

7.8HIGH

CVE-2025-47407

all versions

Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.

7.8HIGH

CVE-2025-47404

all versions

Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.

6.5MEDIUM

CVE-2025-47403

all versions

Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.

6.5MEDIUM

CVE-2025-47401

all versions

Transient DOS when processing target power rate tables during channel configuration.

6.5MEDIUM

CVE-2026-21381

all versions

Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness netwo

7.6HIGH

CVE-2025-47389

all versions

Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.

7.8HIGH

CVE-2025-47374

all versions

Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling.

6.5MEDIUM

CVE-2026-21385

all versions

Memory corruption while using alignments for memory allocation.

7.8HIGH

CVE-2025-59600

all versions

Memory Corruption when adding user-supplied data without checking available buffer space.

7.8HIGH

CVE-2025-47385

all versions

Memory Corruption when accessing trusted execution environment without proper privilege check.

7.8HIGH

CVE-2025-47377

all versions

Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls.

7.8HIGH

CVE-2025-47373

all versions

Memory Corruption when accessing buffers with invalid length during TA invocation.

7.8HIGH

CVE-2025-47398

all versions

Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.

7.8HIGH

CVE-2025-47397

all versions

Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.

7.8HIGH

CVE-2025-47366

all versions

Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.

7.1HIGH

CVE-2025-47396

all versions

Memory corruption occurs when a secure application is launched on a device with insufficient memory.

7.8HIGH

CVE-2025-47394

all versions

Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations.

7.8HIGH

CVE-2025-47388

all versions

Memory corruption while passing pages to DSP with an unaligned starting address.

7.8HIGH

CVE-2025-47369

all versions

Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.

5.5MEDIUM

CVE-2025-47348

all versions

Memory corruption while processing identity credential operations in the trusted application.

7.8HIGH

CVE-2025-47346

all versions

Memory corruption while processing a secure logging command in the trusted application.

7.8HIGH

CVE-2025-47345

all versions

Cryptographic issue may occur while encrypting license data.

8.4HIGH

CVE-2025-47344

all versions

Memory corruption while handling sensor utility operations.

6.7MEDIUM

CVE-2025-47339

all versions

Memory corruption while deinitializing a HDCP session.

7.8HIGH

CVE-2025-47337

all versions

Memory corruption while accessing a synchronization object during concurrent operations.

6.7MEDIUM

CVE-2025-47334

all versions

Memory corruption while processing shared command buffer packet between camera userspace and kernel.

6.7MEDIUM

CVE-2025-47333

all versions

Memory corruption while handling buffer mapping operations in the cryptographic driver.

6.6MEDIUM

CVE-2025-47332

all versions

Memory corruption while processing a config call from userspace.

6.7MEDIUM

CVE-2025-47331

all versions

Information disclosure while processing a firmware event.

6.1MEDIUM

CVE-2025-47330

all versions

Transient DOS while parsing video packets received from the video firmware.

5.5MEDIUM

CVE-2025-47382

all versions

Memory corruption while loading an invalid firmware in boot loader.

7.8HIGH

CVE-2025-47370

all versions

Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.

6.5MEDIUM

CVE-2025-47354

all versions

Memory corruption while allocating buffers in DSP service.

7.8HIGH

CVE-2025-27054

all versions

Memory corruption while processing a malformed license file during reboot.

7.8HIGH

CVE-2025-27053

all versions

Memory corruption during PlayReady APP usecase while processing TA commands.

7.8HIGH