Export limit exceeded: 425857 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search vulnerabilities
Buffer Over-read in Automotive Multimedia
Information disclosure while processing IO control commands.
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Linux
Memory corruption while parsing the memory map info in IOCTL calls.
Improper Input Validation in Hypervisor
Memory corruption while configuring a Hypervisor based input virtual device.
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in TZ Secure OS
Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization.
Integer Overflow or Wraparound in WLAN HOST
Memory corruption when more scan frequency list or channels are sent from the user space.
Buffer Over-read in WLAN Firmware
Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame.
Stack-based Buffer Overflow in PMIC
Memory corruption when size of buffer from previous call is used without validation or re-initialization.
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio
Memory corruption while querying module parameters from Listen Sound model client in kernel from user space.
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio
Memory corruption when the bandpass filter order received from AHAL is not within the expected range.
Buffer Copy Without Checking Size of Input in Audio
Memory corruption while processing Codec2 during v13k decoder pitch synthesis.
Stack-based Buffer Overflow in WLAN HAL
Memory corruption while processing TPC target power table in FTM TPC.
Buffer Over-read in WLAN Firmware
Transient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame.
Buffer Over-read in Audio
Transient DOS while processing channel information for speaker protection v2 module in ADSP.
Buffer Over-read in WLAN Firmware
Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame.
Use of Out-of-range Pointer Offset in WLAN HOST
Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE.
Use after free in Core
Memory corruption due to use after free in Core when multiple DCI clients register and deregister.
Double free in Core
Memory corruption due to double free in Core while mapping HLOS address to the list.
Improper Access control in GPU Subsystem
Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode.