Search vulnerabilities
Use After Free in Automotive Multimedia
Memory corruption while invoking HGSL IOCTL context create.
Use After Free in DSP Service
Memory corruption when two threads try to map and unmap a single node simultaneously.
Improper Restriction of Operations within the Bounds of a Memory Buffer in TZ Secure OS
Memory corruption in TZ Secure OS while loading an app ELF.
Buffer Over-read in Audio
Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size.
Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in SPS-Applications
Memory corruption while processing finish_sign command to pass a rsp buffer.
Buffer Copy Without Checking Size of Input in Audio
Memory corruption in Audio while processing IIR config data from AFE calibration block.
Improper Access Control in Kernel
Improper Access to the VM resource manager can lead to Memory Corruption.
Improper Input Validation in Modem
Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.
Buffer Over-read in IOE Firmware
Information disclosure in IOE Firmware while handling WMI command.
Buffer Over-read in Data Modem
Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.
Buffer Over-read in Audio
Transient DOS in Audio when invoking callback function of ASM driver.
Use After Free in HLOS
Memory corruption during concurrent access to server info object due to unprotected critical field.
Use of Out-of-range Pointer Offset in Audio
Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points.
Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux
Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.
Buffer Copy Without Checking Size of Input in SPS Applications
Memory corruption in SPS Application while requesting for public key in sorter TA.
Buffer Over-read in Audio
Information disclosure in Audio while accessing AVCS services from ADSP payload.
Buffer Over-read in Data Modem
Information Disclosure in data Modem while parsing an FMTP line in an SDP message.
Double Free in Modem
Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.