Search vulnerabilities
Improper Authentication in GPS_GNSS
Cryptographic issue occurs due to use of insecure connection method while downloading.
Configuration Issue in Core
Memory corruption in Core when updating rollback version for TA and OTA feature is enabled.
Cryptographic Issues in Automotive
Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data.
Buffer Copy without Checking Size of Input in HLOS
Memory corruption in HLOS while running playready use-case.
Use of Out-of-range Pointer Offset in Audio
The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.
Use of Out-of-range Pointer Offset in Audio
Memory corruption in Audio during playback with speaker protection.
Improper Validation of Array Index in WLAN HAL
Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART.
Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN HAL
Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload.
Improper Validation of Array Index in WLAN HAL
Memory corruption in WLAN HAL while handling command through WMI interfaces.
Improper Input Validation in HLOS
Memory Corruption in HLOS while registering for key provisioning notify.
Improper Validation of Array Index in Camera
Memory corruption while power-up or power-down sequence of the camera sensor.
Buffer Over-read in Computer Vision
Information disclosure while processing information on firmware image during core initialization.
Improper Input Validation in Hypervisor
Memory corruption while configuring a Hypervisor based input virtual device.
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in TZ Secure OS
Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization.
Buffer Copy Without Checking Size of Input in Audio
Memory corruption while processing Codec2 during v13k decoder pitch synthesis.
Buffer Over-read in FM Host
Transient DOS while handling PS event when Program Service name length offset value is set to 255.
Buffer Over-read in MProc
Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
Improper Validation of Array Index in Hypervisor
Memory corruption while Configuring the SMR/S2CR register in Bypass mode.