Search vulnerabilities
Incorrect Authorization in Graphics Windows
Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service
Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC.
Untrusted Pointer Dereference in DSP Service
Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.
Use After Free in Graphics
Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.
Incorrect Authorization in Graphics
Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera_Linux
Memory corruption while submitting blob data to kernel space though IOCTL.
Use After Free in NPU
Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously.
Buffer Copy Without Checking Size of Input in Computer Vision
Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake.
Buffer Copy Without Checking Size of Input in HLOS
Memory corruption while performing private key encryption in trusted application.
Cryptographic Issues in Core
Cryptographic issue while performing RSA PKCS padding decoding.
Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity
Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.
Improper Access Control Applied to Mirrored or Aliased Memory Regions in Hypervisor
memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.
Improper Validation of Array Index in Multi-Mode Call Processor
Memory corruption while selecting the PLMN from SOR failed list.
Use After Free in Camera Driver
Memory corruption while processing config_dev IOCTL when camera kernel driver drops its reference to CPU buffers.
Use After Free in Automotive Software platform based on QNX
Memory corruption while processing message in guest VM.
Improper Input Validation in Automotive Software platform based on QNX
Memory corruption while processing data sent by FE driver.
Use After Free in Automotive Software platform based on QNX
Memory corruption while handling repeated memory unmap requests from guest VM.
Double Free in Video
Memory corruption due to double free when multiple threads race to set the timestamp store.
Buffer Over-read in BT Controller
Memory corruption due to global buffer overflow when a test command uses an invalid payload type.