Search vulnerabilities
Double Free in HLOS
Memory corruption while performing finish HMAC operation when context is freed by keymaster.
Use After Free in Graphics
Memory corruption in Graphics while processing user packets for command submission.
Integer Overflow or Wraparound in Audio
Memory corruption while allocating memory in COmxApeDec module in Audio.
Integer Overflow or Wraparound in Audio
Memory Corruption in Audio while playing amrwbplus clips with modified content.
Improper Release of Memory Before Removing Last Reference (`Memory Leak`) in Graphics
Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool.
Incorrect Type Conversion or Cast in Graphics
Memory corruption in Graphics while importing a file.
Improper Validation of Array Index in GPS HLOS Driver
Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length.
Buffer Copy without Checking Size of Input in Data Network Stack & Connectivity
Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony.
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HAL
Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
Improper Authentication in HLOS.
Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.
Integer overflow or wraparound in WLAN
Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.
Incorrect type conversion in WLAN
Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
Improper access control in Kernel
Memory corruption due to improper access control in kernel while processing a mapping request from root process.
Double free in Video
Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.
Buffer over-read in WLAN Firmware.
Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.
Buffer over-read in Bluetooth Host.
Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.
Use after free in Modem
Memory corruption due to use after free in Modem while modem initialization.
Improper restriction of operations within the bounds of memory buffer in Linux
Memory corruption in Linux while sending DRM request.