Search vulnerabilities
Improper Restriction of Operations withing the Bounds of a Memory Buffer in DSP Services
Memory corruption while processing IOCTL handler in FastRPC.
Use After Free in Linux Graphics
Memory corruption while running VK synchronization with KASAN enabled.
Buffer Over-read in WLAN Firmware
Transient DOS in WLAN Firmware while parsing no-inherit IES.
Buffer Copy Without Checking Size of Input in Bluetooth HOST
Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size.
Buffer Over-read in WLAN Host Communication
Transient DOS while parsing probe response and assoc response frame.
Buffer Over-read in Data Modem
Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.
Buffer Over-read in WLAN Host Communication
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.
Improper Validation of Array Index in Automotive Autonomy
Memory corruption while operating the mailbox in Automotive.
Buffer Over-read in WLAN HOST
Memory Corruption in WLAN HOST while fetching TX status information.
Improper Release of Memory Before Removing Last Reference in Multi-Mode Call Processor
Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage.
Buffer Copy Without Checking Size of Input in WLAN HOST
Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.
Buffer Copy Without Checking Size of Input in Core Services
Memory corruption while processing data packets in diag received from Unix clients.
Improper Access Control in Kernel
Improper Access to the VM resource manager can lead to Memory Corruption.
Improper Authorization in SPS-HLOS
Information disclosure while deriving keys for a session for any Widevine use case.
Stack-based Buffer Overflow in WLAN HOST
Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message.
Buffer Over-read in Display
Memory corruption when the captureRead QDCM command is invoked from user-space.
Integer Overflow or Wraparound in HLOS
Memory corruption in HLOS while checking for the storage type.
Buffer Over-read in WLAN Firmware
Transient DOS while parse fils IE with length equal to 1.
Improper Input Validation in Multi-Mode Call Processor
Transient DOS in Multi-Mode Call Processor while processing UE policy container.