A vulnerability in neuropilot involves a possible out of bounds write caused by a missing bounds check. This flaw could allow local escalation of privilege if an attacker already has System privilege. Exploitation does not require user interaction. No patch information is currently provided.
A vulnerability in the modem component allows an application crash due to improper input validation. This flaw can be exploited remotely without user interaction if a user equipment (UE) connects to a rogue base station controlled by an attacker, potentially causing a denial of service condition.
A vulnerability in the modem component allows an out of bounds read due to a missing bounds check. This flaw can be exploited remotely by an attacker controlling a rogue base station to cause a denial of service on a user equipment (UE) device without requiring user interaction or additional privileges. Patches identified as MOLY01349680 and MOLY01369097 address this issue.
A side channel information disclosure vulnerability exists in the Modem component, potentially allowing local information disclosure if an attacker has already obtained System privileges. Exploitation does not require user interaction. No CVSS score or detailed impact metrics are provided.
A memory corruption vulnerability exists in the USB component due to a missing bounds check. This flaw could allow local escalation of privilege if an attacker already has System privileges. Exploitation does not require user interaction. No patch information is currently provided.
A double free vulnerability in afe can cause memory corruption, potentially allowing local privilege escalation if the attacker already has System privileges. Exploitation does not require user interaction. No patch information is provided.
A vulnerability in the Modem component allows an out of bounds write due to an incorrect bounds check. This flaw can be exploited remotely without user interaction if a user equipment (UE) connects to a rogue base station controlled by an attacker. Exploitation could lead to a denial of service condition.
A use-after-free vulnerability in the adsp component could allow local escalation of privilege. Exploitation does not require user interaction but assumes the attacker already has System privileges.
A use-after-free vulnerability in the USB subsystem can cause a system crash, potentially leading to a local denial of service. Exploitation requires the attacker to already have System privileges, and no user interaction is needed.
A use-after-free vulnerability exists in the USB component that may cause memory corruption. Exploitation does not require user interaction and could lead to local privilege escalation if the attacker already has System privileges. No patch or fixed versions are currently specified.
A vulnerability in the Modem component allows a possible out-of-bounds write due to a missing bounds check. Exploitation requires user interaction and system-level privileges. Successful exploitation could lead to a remote denial of service if a user equipment (UE) connects to a rogue base station controlled by an attacker.
A vulnerability in the USB subsystem involves a possible memory corruption due to a double free condition. This flaw could allow local escalation of privilege if an attacker already has System privileges. Exploitation does not require user interaction. No affected versions or patch information are provided.
A use-after-free memory corruption vulnerability exists in afe, which could allow local escalation of privilege if an attacker already has System privileges. Exploitation does not require user interaction. No affected versions or patch information are provided.
A use-after-free memory corruption vulnerability exists in afe, which could allow local escalation of privilege if an attacker already has System privileges. Exploitation does not require user interaction. No affected versions or patch information are provided.
A permissions bypass vulnerability exists in the Modem component that could allow a local attacker with System privileges to cause a denial of service. Exploitation does not require user interaction. A patch identified as MOLY01880753 addresses this issue.
A use-after-free vulnerability exists in afe that can cause a system crash and potentially allow local privilege escalation if the attacker already has System privileges. Exploitation does not require user interaction. No patch information is currently available.
A vulnerability in the Modem component allows an out-of-bounds write due to an incorrect bounds check. This flaw can be exploited locally to escalate privileges without requiring additional execution privileges or user interaction.
A logic error in the display component can cause a system crash, resulting in a local denial of service. Exploitation requires the attacker to have System privilege, and no user interaction is needed.
A vulnerability in the Modem component allows an out of bounds write due to a missing bounds check. This flaw could enable remote escalation of privilege if a user equipment (UE) connects to a rogue base station controlled by an attacker. Exploitation does not require user interaction or additional execution privileges.
A use-after-free vulnerability in the USB subsystem can cause a system crash, potentially leading to a local denial of service. Exploitation requires the attacker to have System privileges, and no user interaction is needed.