CVE-2025-21440
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.
CVE-2025-21439
Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer.
CVE-2025-21438
Memory corruption while IOCTL call is invoked from user-space to read board data.
CVE-2025-21437
Memory corruption while processing memory map or unmap IOCTL operations simultaneously.
CVE-2025-21436
Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads.
CVE-2025-21435
Transient DOS may occur while parsing extended IE in beacon.
CVE-2025-21434
Transient DOS may occur while parsing EHT operation IE or EHT capability IE.
CVE-2025-21431
Information disclosure may be there when a guest VM is connected.
CVE-2025-21430
Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.
CVE-2025-21429
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.
CVE-2025-21428
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.
CVE-2025-21425
Memory corruption may occur due top improper access control in HAB process.
CVE-2025-21423
Memory corruption occurs when handling client calls to EnableTestMode through an Escape call.
CVE-2025-21421
Memory corruption while processing escape code in API.
CVE-2024-49848
Memory corruption while processing multiple IOCTL calls from HLOS to DSP.
CVE-2024-45557
Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation.
CVE-2024-45556
Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.
CVE-2024-45552
Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards.
CVE-2024-45551
Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass.
CVE-2024-45549
Information disclosure while creating MQ channels.