Search vulnerabilities
Double Free in HLOS
Memory corruption while performing finish HMAC operation when context is freed by keymaster.
Buffer Over-read in WLAN HAL
Information disclosure in WLAN HAL when reception status handler is called.
Improper Validation of Array Index in WLAN HAL
Memory corruption in WLAN handler while processing PhyID in Tx status handler.
Improper Validation of Array Index in WLAN HAL
Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload.
Integer Overflow or Wraparound in Audio
Memory corruption while allocating memory in COmxApeDec module in Audio.
Integer Overflow or Wraparound in Audio
Memory Corruption in Audio while playing amrwbplus clips with modified content.
Improper Release of Memory Before Removing Last Reference (`Memory Leak`) in Graphics
Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool.
Incorrect Type Conversion or Cast in Graphics
Memory corruption in Graphics while importing a file.
Buffer Over-read in WLAN Firmware
Transient DOS in WLAN Firmware while processing frames with missing header fields.
Improper Input Validation in Audio
Memoru corruption in Audio when ADSP sends input during record use case.
Key Management Errors in HLOS
Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use.
Incorrect Type Conversion or Cast in Core
Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HAL
Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
Improper Authentication in HLOS.
Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.
Improper Validation of Array Index in Bluetooth HOST
Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response.
Buffer Over-read in WLAN
Transient DOS due to buffer over-read in WLAN while sending a packet to device.
Untrusted Pointer Dereference in Core
Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request.
Integer overflow or wraparound in WLAN
Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.
Incorrect type conversion in WLAN
Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.