| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Vulnerability of returning released pointers in the distributed notification service.
Impact: Successful exploitation of this vulnerability may affect availability. |
| Vulnerability of improper processing of abnormal conditions in huge page separation.
Impact: Successful exploitation of this vulnerability may affect availability. |
| Out-of-bounds read vulnerability in the register configuration of the DMA module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| MantisBT is an open source bug tracker. Due to insufficient access-level checks on the Wiki redirection page, any user can reveal private Projects' names, by accessing wiki.php with sequentially incremented IDs. This issue has been addressed in commit `65c44883f` which has been included in release `2.25.8`. Users are advised to upgrade. Users unable to upgrade should disable wiki integration ( `$g_wiki_enable = OFF;`). |
| Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver. |
| Memory Corruption in Data Modem while processing DMA buffer release event about CFR data. |
| While processing the authentication message in UE, improper authentication may lead to information disclosure. |
| Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request. |
| Memory corruption while registering a buffer from user-space to kernel-space using IOCTL calls. |
| Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length. |
| Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls, |
| Memory Corruption in WLAN HOST while parsing QMI response message from firmware. |
| Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory. |
| Memory Corruption in Modem due to double free while parsing the PKCS15 sim files. |
| Memory corruption during the image encoding process. |
| Memory corruption while processing event close when client process terminates abruptly. |
| Memory corruption while processing a private escape command in an event trigger. |
| Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware. |
| Memory corruption while processing data packets in diag received from Unix clients. |
| Memory corruption while processing the TESTPATTERNCONFIG escape path. |
