A permissions bypass vulnerability exists in the Modem component that could allow a local attacker with System privileges to cause a denial of service. Exploitation does not require user interaction. A patch identified as MOLY01880753 addresses this issue.
A use-after-free vulnerability exists in afe that can cause a system crash and potentially allow local privilege escalation if the attacker already has System privileges. Exploitation does not require user interaction. No patch information is currently available.
A vulnerability in the Modem component allows an out-of-bounds write due to an incorrect bounds check. This flaw can be exploited locally to escalate privileges without requiring additional execution privileges or user interaction.
A logic error in the display component can cause a system crash, resulting in a local denial of service. Exploitation requires the attacker to have System privilege, and no user interaction is needed.
A vulnerability in the Modem component allows an out of bounds write due to a missing bounds check. This flaw could enable remote escalation of privilege if a user equipment (UE) connects to a rogue base station controlled by an attacker. Exploitation does not require user interaction or additional execution privileges.
A use-after-free vulnerability in the USB subsystem can cause a system crash, potentially leading to a local denial of service. Exploitation requires the attacker to have System privileges, and no user interaction is needed.
A vulnerability in the modem component allows an out of bounds write due to a missing bounds check. This flaw can be exploited remotely by an attacker controlling a rogue base station to cause a denial of service on the affected device. No user interaction or additional execution privileges are required for exploitation.
A vulnerability in afe allows a possible out of bounds write due to a missing bounds check. This flaw could enable local escalation of privilege if an attacker already has System privileges. Exploitation does not require user interaction. No affected versions or patch details are provided.
A use-after-free memory corruption vulnerability exists in afe, which could allow local escalation of privilege if the attacker already has System privileges. Exploitation does not require user interaction. No patch information is provided.
A vulnerability in the Modem component allows an out of bounds write due to an incorrect bounds check. This flaw can cause a local denial of service without requiring additional execution privileges or user interaction.
A vulnerability in modem software allows possible information disclosure through a side channel. This flaw could enable a remote denial of service if a user equipment (UE) connects to a rogue base station controlled by an attacker. Exploitation does not require additional privileges or user interaction.
A use-after-free memory corruption vulnerability exists in adsp that could lead to local privilege escalation if an attacker already has System privileges. Exploitation does not require user interaction. No patch information is currently available.
A vulnerability in afe allows a possible out of bounds write due to a missing bounds check. This flaw could enable local escalation of privilege if an attacker already has System privileges. Exploitation does not require user interaction. No affected versions or patch details are provided.
An integer overflow vulnerability in adsp can cause an out of bounds write, potentially allowing local privilege escalation if the attacker already has System privileges. Exploitation does not require user interaction. No patch information is provided.
A vulnerability in the modem component allows a possible system crash due to improper input validation. This can lead to a remote denial of service (DoS) if a user equipment (UE) connects to a rogue base station controlled by an attacker. Exploitation does not require user interaction or additional execution privileges.
A vulnerability in the modem component allows for a possible out of bounds write due to improper input validation. This flaw could enable remote escalation of privilege if a user equipment (UE) connects to a rogue base station controlled by an attacker. Exploitation does not require additional execution privileges or user interaction.
A vulnerability in the Modem component allows an out of bounds read due to a missing bounds check. This flaw can be exploited remotely without user interaction if a user equipment (UE) connects to a rogue base station controlled by an attacker. Exploitation could result in a denial of service condition. No additional execution privileges are required for exploitation.
A use-after-free vulnerability in the GPU pdma component can cause memory corruption. Exploitation requires local user execution privileges but no user interaction. This flaw may allow local privilege escalation.
A vulnerability identified as CVE-2026-20553 involves a possible out-of-bounds write in DA due to a missing bounds check. This flaw could allow local escalation of privilege if an attacker has physical access to the device. Exploitation does not require additional execution privileges or user interaction. No patch information is currently available.
A vulnerability in the modem component allows an out of bounds write due to a missing bounds check. This flaw could enable remote escalation of privilege if a user equipment (UE) connects to a rogue base station controlled by an attacker. Exploitation does not require user interaction or additional execution privileges.