Search vulnerabilities
Improper Validation of Array Index in Automotive Autonomy
Memory corruption while operating the mailbox in Automotive.
Use After Free in HLOS
Memory corruption when multiple listeners are being registered with the same file descriptor.
Buffer Over-read in WLAN HOST
Memory Corruption in WLAN HOST while fetching TX status information.
Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in SPS-Applications
Memory corruption while processing finish_sign command to pass a rsp buffer.
Use after free in Neural Processing Unit
Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time.
Improper Authentication in Multi-Mode Call Processor
Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.
Buffer Over-read in Data Modem
Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
Buffer Over-read in Hypervisor
Transient DOS during hypervisor virtual I/O operation in a virtual machine.
Buffer Over-read in WLAN Embedded SW
Transient DOS while processing received beacon frame.
Integer Overflow to Buffer Overflow in User Identity Module
Memory corruption while using the UIM diag command to get the operators name.
Improper Access Control in Kernel
Improper Access to the VM resource manager can lead to Memory Corruption.
Improper Restriction of Operations within the Bounds of a Memory Buffer in UTILS
Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.
Buffer Over-read in WLAN Firmware
Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.
Buffer Over-read in WLAN Firmware
Transient DOS in WLAN Firmware while parsing no-inherit IES.
Improper Release of Memory Before Removing Last Reference in Multi-Mode Call Processor
Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage.
NULL pointer dereference in WLAN Firmware
Memory corruption when processing cmd parameters while parsing vdev.
Buffer Over-read in WLAN Firmware
Transient DOS while parse fils IE with length equal to 1.
Buffer Over-read in WLAN Firmware
Transient DOS while parsing WPA IES, when it is passed with length more than expected size.
Buffer Copy Without Checking Size of Input in Boot
Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.