Search vulnerabilities
NULL pointer dereference in WLAN Firmware
Memory corruption when processing cmd parameters while parsing vdev.
NULL Pointer Dereference in WLAN Firmware
Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.
Improper Authentication in Core
Memory Corruption in Core due to secure memory access by user while loading modem image.
Buffer Copy Without Checking Size of Input in WLAN HOST
Memory Corruption in WLAN HOST while parsing QMI response message from firmware.
Improper Validation of Array Index in HLOS
Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application.
Buffer Copy Without Checking Size of Input in Video
Memory corruption while parsing qcp clip with invalid chunk data size.
NULL Pointer Dereference in SPS-HLOS
Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.
Buffer Over-read in WLAN Host Communication
Transient DOS while parsing per STA profile in ML IE.
Buffer Over-read in Audio
Information disclosure in Audio while accessing AVCS services from ADSP payload.
Buffer Copy Without Checking Size of Input in HLOS
Memory corruption in HLOS while converting from authorization token to HIDL vector.
Use After Free in Linux Graphics
Memory corruption while running VK synchronization with KASAN enabled.
Improper Restriction of Operation within the Bounds of a Memory Buffer in TZ Secure OS
Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.
Buffer Over-read in WLAN Host
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data.
Buffer Over-read in Audio
Transient DOS in Audio when invoking callback function of ASM driver.
Improper Restriction of Operations within the Bounds of a Memory Buffer in MPP Performance
Memory corruption in MPP performance while accessing DSM watermark using external memory address.
Buffer Over-read in Qualcomm IPC
Information Disclosure in Qualcomm IPC while reading values from shared memory in VM.
Integer Overflow or Wraparound in TZ Secure OS
Memory corruption in TZ Secure OS while requesting a memory allocation from TA region.
Buffer Copy without Checking Size of Input in HLOS
Memory corruption in HLOS while running playready use-case.