Show filters
27 Total Results
Displaying 1-10 of 27
Sort by:
Attacker Value
Unknown

CVE-2024-21461

Disclosure Date: July 01, 2024 (last updated July 03, 2024)
Memory corruption while performing finish HMAC operation when context is freed by keymaster.
Attacker Value
Unknown

CVE-2023-33023

Disclosure Date: April 01, 2024 (last updated January 12, 2025)
Memory corruption while processing finish_sign command to pass a rsp buffer.
Attacker Value
Unknown

CVE-2023-28547

Disclosure Date: April 01, 2024 (last updated January 12, 2025)
Memory corruption in SPS Application while requesting for public key in sorter TA.
Attacker Value
Unknown

CVE-2023-33030

Disclosure Date: January 02, 2024 (last updated January 10, 2024)
Memory corruption in HLOS while running playready use-case.
Attacker Value
Unknown

CVE-2023-28586

Disclosure Date: December 05, 2023 (last updated December 13, 2023)
Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.
Attacker Value
Unknown

CVE-2023-28546

Disclosure Date: December 05, 2023 (last updated December 12, 2023)
Memory Corruption in SPS Application while exporting public key in sorter TA.
Attacker Value
Unknown

CVE-2022-22076

Disclosure Date: June 06, 2023 (last updated October 08, 2023)
information disclosure due to cryptographic issue in Core during RPMB read request.
Attacker Value
Unknown

CVE-2021-1924

Disclosure Date: November 12, 2021 (last updated November 28, 2024)
Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Attacker Value
Unknown

CVE-2020-11303

Disclosure Date: October 20, 2021 (last updated November 29, 2024)
Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
0
Attacker Value
Unknown

CVE-2021-30260

Disclosure Date: September 17, 2021 (last updated November 28, 2024)
Possible Integer overflow to buffer overflow issue can occur due to improper validation of input parameters when extscan hostlist configuration command is received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking