Search vulnerabilities
Out-of-bounds Read in Core
Information disclosure while processing the hash segment in an MBN file.
Out-of-bounds Read in Core
Information disclosure while reading data from an image using specified offset and size parameters.
Buffer Over-read in WLAN Host Communication
Transient DOS while processing the EHT operation IE in the received beacon frame.
Buffer Over-read in Core Services
Information disclosure while registering commands from clients with diag through diagHal.
Information Exposure in TZ Secure OS
There may be information disclosure during memory re-allocation in TZ Secure OS.
Buffer Over-read in WLAN Host Communication
Transient DOS may occur while parsing extended IE in beacon.
Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage
memory corruption when an invalid firehose patch command is invoked.
Buffer Over-read in WLAN Firmware
Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element (IE) of a beacon frame that is received from over-the-air (OTA).
Buffer Over-read in WLAN HAL
Transient DOS while processing power control requests with invalid antenna or stream values.
Buffer Over-read in WLAN HAL
Transient DOS while handling command data during power control processing.
Incorrect Calculation of Buffer Size in Video
Memory corruption while processing video packets received from video firmware.
Buffer Over-read in WLAN Host
Transient DOS while handling beacon frames with invalid IE header length.
Buffer Over-read in WLAN HAL
Transient DOS while processing the tone measurement response buffer when the response buffer is out of range.
Buffer Over-read in WLAN Firmware
Transient DOS while processing a frame with malformed shared-key descriptor.
Improper Access Control for Register Interface in TZ Firmware
Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.
Buffer Over-read in WLAN HOST
Information disclosure while handling beacon or probe response frame in STA.
Buffer Over-read in WLAN Host Communication
Transient DOS while parsing probe response and assoc response frame.
Buffer over-read in WLAN Firmware
Transient DOS in WLAN Firmware while parsing a NAN management frame.