| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption. |
| Integer overflow in NPU driver parameter processing due to insufficient bounds checking. |
| Incorrect authorization in Samsung framework services due to missing permission checks |
| A double free vulnerability in NPU driver due to improper pointer management (941) |
| In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a denial of service condition. |
| In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading to denial of service or privilege escalation. |
| In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service. |
| In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption. |
| Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions |
| In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service |
| Out of bound access in PPC due to race condition in global variable access |
| A memory corruption vulnerability caused by improper validation of messages |
| In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition. |
| In the NAS message handler, improper validation of the length field in NAS message causes memory corruption |
| In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability |
| In the baseband, memory corruption during NAS packet processing can cause a denial of service. |
| In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation. |
| In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition. |
| In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service. |
| An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through the SIP message flow. |
