Search vulnerabilities
Improper Input Validation in Automotive
Memory corruption while triggering commands in the PlayReady Trusted application.
Use After Free in GPS HLOS Driver
Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.
Out-of-bounds Write in Computer Vision
Memory corruption while reading the FW response from the shared queue.
Out-of-bounds Write in Computer Vision
Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer.
Use After Free in DSP Service
Memory corruption while processing multiple IOCTL calls from HLOS to DSP.
Buffer Over-read in WLAN Host
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.
Use After Free in Graphics
Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.
Buffer Copy Without Checking Size of Input in HLOS
Memory corruption while performing private key encryption in trusted application.
Cryptographic Issues in Core
Cryptographic issue while performing RSA PKCS padding decoding.
Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity
Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.
Out-of-bounds Write in Display
Memory corruption while processing a malformed license file during reboot.
Incorrect Calculation of Buffer Size in SCE-Mink
Memory corruption while processing a GP command response.
Improper Release of Memory Before Removing Last Reference in Graphics
Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.
Use After Free in Graphics
Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.
Buffer Copy Without Checking Size of Input in SPS Applications
Memory Corruption in SPS Application while exporting public key in sorter TA.
Integer Overflow to Buffer Overflow in TZ Secure OS
Memory corruption while loading an ELF segment in TEE Kernel.
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Radio Interface Layer
Memory corruption while sending SMS from AP firmware.
Buffer Over-read in Data HLOS - LNX
Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.