Search vulnerabilities
Double Free in Modem
Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host
Memory corruption when IOCTL call is invoked from user-space to read board data.
Use of Out-of-range Pointer Offset in Qualcomm IPC
Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.
Buffer Copy Without Checking Size of Input in SPS Applications
Memory corruption in SPS Application while requesting for public key in sorter TA.
Use After Free in DSP Service
Memory corruption when two threads try to map and unmap a single node simultaneously.
Buffer Copy Without Checking Size of Input in Core Services
Memory corruption while processing data packets in diag received from Unix clients.
Improper Release of Memory Before Removing Last Reference in Multi-Mode Call Processor
Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage.
Improper Access Control in Kernel
Improper Access to the VM resource manager can lead to Memory Corruption.
Use After Free in Automotive Multimedia
Memory corruption while invoking IOCTLs calls in Automotive Multimedia.
Buffer Copy Without Checking Size of Input in Video
Memory corruption while parsing qcp clip with invalid chunk data size.
Use After Free in Camera
Memory Corruption in camera while installing a fd for a particular DMA buffer.
Use After Free in Linux Graphics
Memory corruption while running VK synchronization with KASAN enabled.
Out-of-bounds Write in Video
Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
Buffer Over-read in Video
Information disclosure in Video while parsing mp2 clip with invalid section length.
Buffer Copy Without Checking Size of Input in Audio
Memory corruption in Audio while processing IIR config data from AFE calibration block.
Improper Authentication in Automotive OS
Transient DOS in Automotive OS due to improper authentication to the secure IO calls.
NULL Pointer Dereference in SPS-HLOS
Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.
Improper Input Validation in Modem
Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.
Integer Overflow or Wraparound in Core Services
Memory corruption while processing a QMI request for allocating memory from a DHMS supported subsystem.