Use After Free in Camera Driver
Memory corruption while processing config_dev IOCTL when camera kernel driver drops its reference to CPU buffers.
Export limit exceeded: 425825 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Memory corruption while processing config_dev IOCTL when camera kernel driver drops its reference to CPU buffers.
Memory corruption while handling invalid inputs in application info setup.
Memory corruption during PlayReady APP usecase while processing TA commands.
Memory corruption while processing a malformed license file during reboot.
Memory corruption while allocating buffers in DSP service.
Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.
Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.
Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.
Memory Corruption in Audio while invoking IOCTLs calls from the user-space.
Memory Corruption in SPS Application while exporting public key in sorter TA.
Memory corruption while loading an ELF segment in TEE Kernel.
Memory corruption while sending SMS from AP firmware.
Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.
Memory corruption while processing MFC channel configuration during music playback.
Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.
Transient DOS may occur while processing malformed length field in SSID IEs.
Memory corruption during video playback when video session open fails with time out error.
Memory corruption while handling IOCTL calls to set mode.
Memory corruption while routing GPR packets between user and root when handling large data packet.
Transient DOS while parsing video packets received from the video firmware.