Search vulnerabilities
Buffer Over-read in Data Modem
Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.
Use of Out-of-range Pointer Offset in Audio
Memory corruption in Audio while processing RT proxy port register driver.
Use After Free in Automotive Multimedia
Memory corruption while invoking HGSL IOCTL context create.
Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux
Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host
Memory corruption when IOCTL call is invoked from user-space to read board data.
Improper Input Validation in Core
Memory Corruption in Core during syscall for Sectools Fuse comparison feature.
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Camera_Linux
Memory corruption while processing camera TPG write request.
Use After Free in DSP Service
Memory corruption during sub-system restart while processing clean-up to free up resources.
Use After Free in Camera Linux
Memory corruption caused by missing locks and checks on the DMA fence and improper synchronization.
Use After Free in Automotive Multimedia
Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.
Untrusted Pointer Dereference in Display
Memory corruption while reading ACPI config through the user mode app.
Reachable Assertion in WLAN Firmware
Transient DOS while processing 11AZ RTT management action frame received through OTA.
Configuration Issue in Core
Memory corruption in Core when updating rollback version for TA and OTA feature is enabled.
Cryptographic Issues in Automotive
Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data.
Double Free in Data Network Stack & Connectivity
Memory corruption when IPv6 prefix timer object`s lifetime expires which are created while Netmgr daemon gets an IPv6 address.
Improper Validation of Array Index in Display
Memory corruption when negative display IDs are sent as input while processing DISPLAYESCAPE event trigger.
Memory corruption in WLAN due to buffer copy without checking size of input while parsing keys in Snapdragon Connectivity, Snapdragon Mobile
Improper Input Validation in Services
Information disclosure in Core services while processing a Diag command.
Buffer Copy without Checking Size of Input in HLOS
Memory corruption in HLOS while running playready use-case.