Search vulnerabilities
Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service
Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC.
Untrusted Pointer Dereference in DSP Service
Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.
Buffer Copy Without Checking Size of Input in HLOS
Memory corruption while performing private key encryption in trusted application.
Cryptographic Issues in Core
Cryptographic issue while performing RSA PKCS padding decoding.
Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity
Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.
Improper Access Control Applied to Mirrored or Aliased Memory Regions in Hypervisor
memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.
Buffer Over-read in BT Controller
Memory corruption due to global buffer overflow when a test command uses an invalid payload type.
Incorrect Calculation of Buffer Size in HLOS
Memory corruption during PlayReady APP usecase while processing TA commands.
Out-of-bounds Write in Display
Memory corruption while processing a malformed license file during reboot.
Use After Free in DSP Service
Memory corruption while allocating buffers in DSP service.
Out-of-bounds Write in Windows Compute
Memory corruption while performing encryption and decryption commands.
Exposed Dangerous Method or Function in HLOS
Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.
Buffer Over-read in WLAN Embedded SW
Transient DOS may occur while processing malformed length field in SSID IEs.
Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS
Information disclosure while exposing internal TA-to-TA communication APIs to HLOS
Integer Overflow or Wraparound in Audio
Memory corruption while routing GPR packets between user and root when handling large data packet.
Buffer Over-read in Video
Transient DOS while parsing video packets received from the video firmware.
Use After Free in HLOS
Memory corruption while handling buffer mapping operations in the cryptographic driver.
Use of Uninitialized Variable in HLOS
Memory corruption while processing identity credential operations in the trusted application.