Improper Verification of Cryptographic Signature in Boot
Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.
Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.
Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker.
Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.
Memory corruption when processing draw objects of incorrect type during graphics command list execution.
Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.
Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.
Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.
Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.
Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.
Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.
Transient DOS when processing authentication frames with invalid FILS information element header lengths.
Information Disclosure when processing wireless network channel switch information with improperly formatted length fields.
Cryptographic Issue while processing registration requests with malformed or missing authentication parameters.
Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.
Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling.
Memory Corruption when handling flash commands due to outdated LED count values being used after userspace modification.
Memory Corruption when updating prepared commands with invalid port indices based on user space input exceeds supported read client limits.
Memory Corruption when invoking device input/output control operations for mapping and unmapping persistent memory buffers due to improper synchronization.