Where
-Infinity
0
Severity
9.8
Out-of-bounds Read
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Memory corruption while selecting the PLMN from SOR failed list.

First published (updated )
Severity
9.8
Buffer Overflow
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.

First published (updated )
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Memory Corruption in Data Modem while making a MO call or MT VOLTE call.

First published (updated )
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Memory corruption in WLAN Firmware while doing a memory copy of pmk cache.

First published (updated )
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Memory corruption in Modem while processing security related configuration before AS Security Exchange.

First published (updated )
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Memory Corruption in Multi-mode Call Processor while processing bit mask API.

First published (updated )
Severity
9.3
AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Memory corruption in HLOS while running playready use-case.

First published (updated )
Severity
9.3
AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Memory corruption in Core while processing control functions.

First published (updated )
Severity
8.8
Integer Overflow
AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Memory corruption when decoding corrupted satellite data files with invalid signature offsets.

First published (updated )
Severity
8.8
Buffer Overflow
AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Memory corruption while loading an ELF segment in TEE Kernel.

First published (updated )
Severity
8.7
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Improper Access to the VM resource manager can lead to Memory Corruption.

First published (updated )
Severity
8.6
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

1 / 2
Source: MITRE
First published (updated )
Severity
8.6
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

1 / 2
Source: MITRE
First published (updated )
Severity
8.4
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Memory corruption when allocating and accessing an entry in an SMEM partition continuously.

First published (updated )
Severity
8.4
Input Validation
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory Corruption in HLOS while registering for key provisioning notify.

First published (updated )
Severity
8.4
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Memory Corruption in Core due to secure memory access by user while loading modem image.

First published (updated )
Severity
8.4
Buffer Overflow
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Memory corruption while submitting a large list of sync points in an AUX command to the IOCTLKGSLGPUAUXCOMMAND.

1 / 2
First published (updated )
Severity
8.4
Integer Overflow
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

1 / 2
First published (updated )
Severity
8.4
Null Pointer Dereference
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Memory corruption when processing cmd parameters while parsing vdev.

First published (updated )
Severity
8.2
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.

First published (updated )
Severity
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Information Disclosure in data Modem while parsing an FMTP line in an SDP message.

First published (updated )
Severity
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.

First published (updated )
Severity
8.1
AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Cryptographic Issue while processing registration requests with malformed or missing authentication parameters.

First published (updated )
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.

First published (updated )
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory corruption when allocating and accessing an entry in an SMEM partition.

First published (updated )
Severity
7.8
Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory corruption when keymaster operation imports a shared key.

First published (updated )
Severity
7.8
Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory corruption during session sign renewal request calls in HLOS.

First published (updated )
Severity
7.8
Out-of-bounds Read
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload.

First published (updated )
Severity
7.8
Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload.

First published (updated )
Severity
7.8
Out-of-bounds Read
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART.

First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203