Search vulnerabilities
Untrusted Pointer Dereference in TZ Firmware
Information disclosure while processing system calls with invalid parameters.
Buffer Copy Without Checking Size of Input in Audio
Memory corruption in Audio while processing the VOC packet data from ADSP.
Buffer Copy Without Checking Size of Input in Automotive Audio
Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.
Out-of-bounds Read in Core
Information disclosure while processing the hash segment in an MBN file.
Out-of-bounds Read in Core
Information disclosure while reading data from an image using specified offset and size parameters.
Buffer Over-read in WLAN Host Communication
Transient DOS while processing the EHT operation IE in the received beacon frame.
Buffer Over-read in BT Controller
Transient DOS while parsing the EPTM test control message to get the test pattern.
Buffer Over-read in Core Services
Information disclosure while registering commands from clients with diag through diagHal.
Integer Overflow or Wraparound in Graphics Linux
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
Use After Free in DSP Services
Memory corruption in DSP Services during a remote call from HLOS to DSP.
Improper Input Validation in TZ Firmware
Information disclosure may occur while processing the hypervisor log.
Use After Free in Data Network Stack & Connectivity
Memory corruption while processing IOCTL calls to add route entry in the HW.
Out-of-bounds Write in Audio
Memory corruption while accessing MSM channel map and mixer functions.
Use After Free in HLOS
Memory corruption while invoking IOCTL map buffer request from userspace.
Information Exposure in TZ Secure OS
There may be information disclosure during memory re-allocation in TZ Secure OS.
Buffer Over-read in WLAN Firmware
Transient DOS may occur while parsing SSID in action frames.
Buffer Over-read in WLAN Host Communication
Transient DOS may occur while parsing extended IE in beacon.
Buffer Over-read in WLAN Host
Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.