Search vulnerabilities
Use After Free in DSP Services
Memory corruption in DSP Services during a remote call from HLOS to DSP.
Improper Input Validation in TZ Firmware
Information disclosure may occur while processing the hypervisor log.
Information Exposure in TZ Secure OS
There may be information disclosure during memory re-allocation in TZ Secure OS.
Buffer Over-read in WLAN Firmware
Transient DOS may occur while parsing SSID in action frames.
Buffer Over-read in WLAN Host Communication
Transient DOS may occur while parsing extended IE in beacon.
Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage
memory corruption when an invalid firehose patch command is invoked.
Buffer Over-read in WLAN HAL
Transient DOS while handling command data during power control processing.
Incorrect Calculation of Buffer Size in Video
Memory corruption while processing video packets received from video firmware.
Buffer Over-read in WLAN Host
Transient DOS while handling beacon frames with invalid IE header length.
Buffer Over-read in WLAN HOST
Information disclosure while handling beacon or probe response frame in STA.
Buffer over-read in WLAN Firmware
Transient DOS in WLAN Firmware while parsing a NAN management frame.
Buffer Over-read in WLAN Firmware
Transient DOS in WLAN Firmware while parsing a BTM request.
Loop with Unreachable Exit Condition (Infinite Loop) in WLAN Firmware
Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.
Buffer Copy Without Checking Size of Input in WLAN HOST
Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.
Buffer Over-read in Qualcomm IPC
Information Disclosure in Qualcomm IPC while reading values from shared memory in VM.
Buffer Over-read in WLAN Firmware
Transient DOS while parsing WPA IES, when it is passed with length more than expected size.
NULL Pointer Dereference in WLAN Firmware
Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.
Buffer Copy Without Checking Size of Input in WLAN HOST
Memory Corruption in WLAN HOST while parsing QMI response message from firmware.