Search vulnerabilities
Buffer Copy Without Checking Size of Input in HLOS
Memory corruption while performing private key encryption in trusted application.
Cryptographic Issues in Core
Cryptographic issue while performing RSA PKCS padding decoding.
Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity
Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.
Improper Access Control Applied to Mirrored or Aliased Memory Regions in Hypervisor
memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.
Out-of-bounds Write in Display
Memory corruption while processing a malformed license file during reboot.
Buffer Copy Without Checking Size of Input in SPS Applications
Memory Corruption in SPS Application while exporting public key in sorter TA.
Integer Overflow to Buffer Overflow in TZ Secure OS
Memory corruption while loading an ELF segment in TEE Kernel.
Buffer Over-read in Data HLOS - LNX
Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.
Out-of-bounds Write in Audio
Memory corruption while processing MFC channel configuration during music playback.
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.
Use After Free in Video
Memory corruption during video playback when video session open fails with time out error.
Buffer Over-read in Video
Transient DOS while parsing video packets received from the video firmware.
Use After Free in HLOS
Memory corruption while handling buffer mapping operations in the cryptographic driver.
Use of Uninitialized Variable in HLOS
Memory corruption while processing identity credential operations in the trusted application.
Information Exposure in Computer Vision
Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
Use of Out-of-range Pointer Offset in Multi-mode Call Processor
Memory Corruption in Multi-mode Call Processor while processing bit mask API.
Time-of-check Time-of-use (TOCTOU) Race Condition in Hypervisor
Memory corruption while loading a VM from a signed VM image that is not coherent in the processor cache.
Buffer Copy Without Checking Size of Input in Audio
Memory corruption in Audio while processing the VOC packet data from ADSP.