Browse CVEs

CRITICAL 9.8 CVE-2023-43518 Memory corruption in video while parsing invalid mp2 clip. Aqt1000 Firmware No fix yet Fix from $2,3002024-02-06 CRITICAL 9.8 CVE-2023-43519 Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size. Aqt1000 Firmware Mitigation only Fix from $2,3002024-02-06 CRITICAL 9.8 CVE-2023-43520 Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE. Ar8035 Firmware Mitigation only Fix from $2,3002024-02-06 HIGH 7.8 CVE-2023-43513 Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may poi… 315 5g Iot Modem Firmware Mitigation only Fix from $1,9502024-02-06 HIGH 7.8 CVE-2023-43516 Memory corruption when malformed message payload is received from firmware. Fastconnect 6900 Firmware No fix yet Fix from $1,9502024-02-06 HIGH 7.8 CVE-2023-43517 Memory corruption in Automotive Multimedia due to improper access control in HAB. Qam8255p Firmware No fix yet Fix from $1,9502024-02-06 HIGH 7.8 CVE-2023-33067 Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points. 9206 Lte Modem Firmware Mitigation only Fix from $1,9502024-02-06 HIGH 7.8 CVE-2023-33068 Memory corruption in Audio while processing IIR config data from AFE calibration block. 9206 Lte Modem Firmware Mitigation only Fix from $1,9502024-02-06 HIGH 7.8 CVE-2023-33069 Memory corruption in Audio while processing the calibration data returned from ACDB loader. 9206 Lte Modem Firmware Mitigation only Fix from $1,9502024-02-06 HIGH 7.8 CVE-2023-33072 Memory corruption in Core while processing control functions. 315 5g Iot Modem Firmware No fix yet Fix from $1,9502024-02-06 HIGH 7.8 CVE-2023-33076 Memory corruption in Core when updating rollback version for TA and OTA feature is enabled. Aqt1000 Firmware Mitigation only Fix from $1,9502024-02-06 HIGH 7.8 CVE-2023-33077 Memory corruption in HLOS while converting from authorization token to HIDL vector. Aqt1000 Firmware Mitigation only Fix from $1,9502024-02-06 CRITICAL 9.1 CVE-2023-33058 Information disclosure in Modem while processing SIB5. Ar8035 Firmware Mitigation only Fix from $2,3002024-02-06 HIGH 7.5 CVE-2023-33049 Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage. 315 5g Iot Modem Firmware Mitigation only Fix from $1,9502024-02-06 HIGH 7.5 CVE-2023-33057 Transient DOS in Multi-Mode Call Processor while processing UE policy container. 315 5g Iot Modem Firmware No fix yet Fix from $1,9502024-02-06 HIGH 7.1 CVE-2023-33065 Information disclosure in Audio while accessing AVCS services from ADSP payload. Aqt1000 Firmware Mitigation only Fix from $1,9502024-02-06 MEDIUM 5.5 CVE-2023-33060 Transient DOS in Core when DDR memory check is called while DDR is not initialized. Ar8035 Firmware Mitigation only Fix from $1,6002024-02-06 MEDIUM 5.5 CVE-2023-33064 Transient DOS in Audio when invoking callback function of ASM driver. Aqt1000 Firmware No fix yet Fix from $1,6002024-02-06 HIGH 7.0 CVE-2023-33046 Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation. Ar8035 Firmware Mitigation only Fix from $1,9502024-02-06 HIGH 7.8 CVE-2023-43514 Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP. Ar8035 Firmware Patch available Fix from $1,9502024-01-02 HIGH 7.5 CVE-2023-43511 Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header. 315 5g Iot Modem Firmware Mitigation only Fix from $1,9502024-01-02 HIGH 7.5 CVE-2023-43512 Transient DOS while parsing GATT service data when the total amount of memory that is required by the multiple services is greater than the actual si… Qcn7606 Firmware Mitigation only Fix from $1,9502024-01-02 HIGH 7.8 CVE-2023-33113 Memory corruption when resource manager sends the host kernel a reply message with multiple fragments. Ar8035 Firmware No fix yet Fix from $1,9502024-01-02 HIGH 7.8 CVE-2023-33114 Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time. 315 5g Iot Modem Firmware Patch available Fix from $1,9502024-01-02 HIGH 7.8 CVE-2023-33117 Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVCS_LOAD_MODULE command. Ar8035 Firmware Patch available Fix from $1,9502024-01-02 HIGH 7.8 CVE-2023-33118 Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HA… Ar8035 Firmware Patch available Fix from $1,9502024-01-02 HIGH 7.8 CVE-2023-33120 Memory corruption in Audio when memory map command is executed consecutively in ADSP. 315 5g Iot Modem Firmware Mitigation only Fix from $1,9502024-01-02 HIGH 7.5 CVE-2023-33116 Transient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver. Ar8035 Firmware Mitigation only Fix from $1,9502024-01-02 HIGH 7.8 CVE-2023-33094 Memory corruption while running VK synchronization with KASAN enabled. Ar8035 Firmware No fix yet Fix from $1,9502024-01-02 HIGH 7.8 CVE-2023-33108 Memory corruption in Graphics Driver when destroying a context with KGSL_GPU_AUX_COMMAND_TIMELINE objects queued. Qam8255p Firmware Patch available Fix from $1,9502024-01-02