Search vulnerabilities
Reusing a Nonce, Key Pair in Encryption in Automotive Platform
Cryptographic issue may occur while encrypting license data.
Out-of-bounds Write in HLOS
Memory corruption while processing a secure logging command in the trusted application.
Buffer Copy Without Checking Size of Input in Boot
Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication.
Improper Access Control in Core
Memory corruption may occur while attaching VM when the HLOS retains access to VM.
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure may occur while decoding the RTP packet with invalid header extension from network.
Out-of-bounds Read in Core
Information disclosure while processing the hash segment in an MBN file.
Out-of-bounds Read in Core
Information disclosure while reading data from an image using specified offset and size parameters.
Buffer Over-read in WLAN Host Communication
Transient DOS while processing the EHT operation IE in the received beacon frame.
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure may occur while processing goodbye RTCP packet from network.
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.
Improper Access Control in Automotive Multimedia
Memory corruption while handling client exceptions, allowing unauthorized channel access.
Missing Authentication for Critical Function in SMSS
Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions.
Buffer Over-read in Automotive Software platform based on QNX
Information disclosure while processing message from client with invalid payload.
Exposed Dangerous Method or Function in HLOS
Cryptographic issues while generating an asymmetric key pair for RKP use cases.
Information Exposure in TZ Secure OS
There may be information disclosure during memory re-allocation in TZ Secure OS.
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards.
Weak Authentication in HLOS
Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass.