Where
-Infinity
0
Severity
8.8
AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Privilege escalation due to weak configuration while temporary file handling.

First published (updated )
Severity
8.8
AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Privilege escalation due to weak configuration during package extraction process.

First published (updated )
Severity
6.9
AV:P/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Memory corruption while processing a crafted ELF file in the Primary Bootloader.

First published (updated )
Severity
8.8
AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Exposed dangerous function lead to privilege escalation via gRPC server.

First published (updated )
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper authorization leads to Remote Code Execution via SocketIO interface.

First published (updated )
Severity
7.4
AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Transient DOS while parsing frame during channel usage.

First published (updated )
Severity
7.8
Integer Overflow
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory Corruption when validating large data buffers from external sources using addition to check buffer length.

First published (updated )
Severity
7.3
AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

Information Disclosure when a pointer is reused after being deallocated.

First published (updated )
Severity
8.8
AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Memory Corruption when copying unverified data from an external source exceeds the allocated buffer size.

First published (updated )
Severity
7.9
AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H

Transient DOS when processing unverified data from a neighboring system causes out of bound memory access.

First published (updated )
Severity
7.4
AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation.

First published (updated )
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory corruption when processing escape handling flow with insufficient user buffer sizes.

First published (updated )
Severity
7.8
Race Condition
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying.

First published (updated )
Severity
7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Transient DOS when processing authentication frames with invalid FILS information element header lengths.

First published (updated )
Severity
7.8
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Memory corruption while processing rear sensor IOCTL calls.

First published (updated )
Severity
7.4
AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.

First published (updated )
Severity
7.8
Race Condition
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.

First published (updated )
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations.

First published (updated )
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory corruption when processing decode statistics due to insufficient validation of offset against structure size.

First published (updated )
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory Corruption when copying large input data exceeds normal allocation limits.

First published (updated )
Severity
7.6
AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.

First published (updated )
Severity
9.6
AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.

First published (updated )
Severity
7.4
AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size.

First published (updated )
Severity
7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities.

First published (updated )
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory Corruption while processing IOCTL device driver requests with invalid arguments.

First published (updated )
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory Corruption when handling malformed request parameters in the fingerprint TA.

First published (updated )
Severity
8.1
AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Cryptographic Issue while processing registration requests with malformed or missing authentication parameters.

First published (updated )
Severity
6.5
AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling.

First published (updated )
Severity
6.5
Integer Underflow
AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Information Disclosure when processing wireless network channel switch information with improperly formatted length fields.

First published (updated )
Severity
6.7
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Memory Corruption when processing registry values with incorrect types using a direct query method.

First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203