Search vulnerabilities
Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive
Memory corruption when keymaster operation imports a shared key.
NULL Pointer Dereference in HLOS
Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus.
Use After Free in Graphics
Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.
Permissions, Privileges, and Access Control issues in TZ Secure OS
Memory corruption when an invoke call and a TEE call are bound for the same trusted application.
Buffer Over-read in Trusted Execution Environment
Memory corruption while processing key blob passed by the user.
Double Free in HLOS
Memory corruption while performing finish HMAC operation when context is freed by keymaster.
NULL Pointer Dereference in Hypervisor
Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call.
Key Management Errors in HLOS
Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use.
Incorrect Type Conversion or Cast in Core
Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.
Untrusted Pointer Dereference in Automotive
Memory corruption due to untrusted pointer dereference in automotive during system call.
Improper Access Control in HAB Memory Management
Memory corruption in HAB Memory management due to broad system privileges via physical address.
Stack-based Buffer Overflow in Automotive GPU
Memory corruption in Automotive GPU while querying a gsl memory node.
Improper Authentication in HLOS.
Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.
Untrusted Pointer Dereference in Core
Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request.
Improper access control in Kernel
Memory corruption due to improper access control in kernel while processing a mapping request from root process.
Information exposure in Kernel
Information disclosure in Kernel due to indirect branch misprediction.
Double free in Automotive
Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed.
Buffer copy without checking the size of input in Core
Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information.