Search vulnerabilities
Use After Free in DSP Services
Memory corruption in DSP Services during a remote call from HLOS to DSP.
Improper Input Validation in TZ Firmware
Information disclosure may occur while processing the hypervisor log.
Information Exposure in TZ Secure OS
There may be information disclosure during memory re-allocation in TZ Secure OS.
Buffer Over-read in WLAN Firmware
Transient DOS may occur while parsing SSID in action frames.
Buffer Over-read in WLAN Host Communication
Transient DOS may occur while parsing extended IE in beacon.
Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage
memory corruption when an invalid firehose patch command is invoked.
Buffer Over-read in WLAN HAL
Transient DOS while handling command data during power control processing.
Incorrect Calculation of Buffer Size in Video
Memory corruption while processing video packets received from video firmware.
Buffer Over-read in WLAN Host
Transient DOS while handling beacon frames with invalid IE header length.
Buffer Over-read in WLAN HOST
Information disclosure while handling beacon or probe response frame in STA.
Buffer Copy without Checking Size of Input in WLAN Firmware
Memory corruption in WLAN Firmware while doing a memory copy of pmk cache.
NULL Pointer Dereference in WLAN Firmware
Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.
Buffer Over-read in WLAN HAL
Information disclosure in WLAN HAL while handling command through WMI interfaces.
Buffer Over-read in WLAN Firmware
Transient DOS in WLAN Firmware while parsing rsn ies.
Loop with Unreachable Exit Condition (Infinite Loop) in WLAN Firmware
Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.
Improper Restriction of Operations within the Bounds of a Memory Buffer in MPP Performance
Memory corruption in MPP performance while accessing DSM watermark using external memory address.
Buffer Over-read in WLAN Host
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data.