Search vulnerabilities
Buffer Over-read in Core Services
Information disclosure while registering commands from clients with diag through diagHal.
Use After Free in DSP Services
Memory corruption in DSP Services during a remote call from HLOS to DSP.
Improper Input Validation in TZ Firmware
Information disclosure may occur while processing the hypervisor log.
Information Exposure in TZ Secure OS
There may be information disclosure during memory re-allocation in TZ Secure OS.
Buffer Over-read in WLAN Firmware
Transient DOS may occur while parsing SSID in action frames.
Buffer Over-read in WLAN Host Communication
Transient DOS may occur while parsing extended IE in beacon.
Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage
memory corruption when an invalid firehose patch command is invoked.
Buffer Over-read in WLAN HAL
Transient DOS while processing power control requests with invalid antenna or stream values.
Buffer Over-read in WLAN HAL
Transient DOS while handling command data during power control processing.
Incorrect Calculation of Buffer Size in Video
Memory corruption while processing video packets received from video firmware.
Buffer Over-read in WLAN Host
Transient DOS while handling beacon frames with invalid IE header length.
Buffer Over-read in WLAN HAL
Transient DOS while processing the tone measurement response buffer when the response buffer is out of range.
Buffer Over-read in WLAN Firmware
Transient DOS while processing a frame with malformed shared-key descriptor.
Improper Access Control for Register Interface in TZ Firmware
Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.
Buffer Over-read in WLAN HOST
Information disclosure while handling beacon or probe response frame in STA.
NULL Pointer Dereference in WLAN Firmware
Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.
Use of Out-of-range Pointer Offset in Qualcomm IPC
Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.
Out-of-bounds Write in Video
Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.