Search vulnerabilities
Incorrect Authorization in Graphics Windows
Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service
Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC.
Untrusted Pointer Dereference in DSP Service
Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.
Use After Free in Graphics
Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.
Incorrect Authorization in Graphics
Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera_Linux
Memory corruption while submitting blob data to kernel space though IOCTL.
Use After Free in NPU
Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously.
Buffer Copy Without Checking Size of Input in HLOS
Memory corruption while performing private key encryption in trusted application.
Cryptographic Issues in Core
Cryptographic issue while performing RSA PKCS padding decoding.
Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity
Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.
Improper Access Control Applied to Mirrored or Aliased Memory Regions in Hypervisor
memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.
Improper Validation of Array Index in Multi-Mode Call Processor
Memory corruption while selecting the PLMN from SOR failed list.
Use After Free in Camera Driver
Memory corruption while processing config_dev IOCTL when camera kernel driver drops its reference to CPU buffers.
Double Free in Video
Memory corruption due to double free when multiple threads race to set the timestamp store.
Buffer Over-read in BT Controller
Memory corruption due to global buffer overflow when a test command uses an invalid payload type.
Release of Invalid Pointer or Reference in Android Core
Memory corruption while handling invalid inputs in application info setup.
Out-of-bounds Write in Display
Memory corruption while processing a malformed license file during reboot.
Buffer Copy Without Checking Size of Input in Camera
memory corruption while processing an image encoding completion event.