Export limit exceeded: 425826 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search vulnerabilities
Improper Validation of Array Index in Audio
Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command.
Use of Out-of-range Pointer Offset in Audio
Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points.
Buffer Over-read in WLAN Host Communication
Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame.
Improper Input Validation in Services
Memory corruption in Core Services while executing the command for removing a single event listener.
Buffer Copy Without Checking Size of Input in Boot
Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.
Buffer Copy Without Checking Size of Input in Audio
Memory corruption in Audio while processing IIR config data from AFE calibration block.
Buffer Over-read in WLAN HAL
Information disclosure in WLAN HAL while handling command through WMI interfaces.
Buffer Copy Without Checking Size of Input in SPS Applications
Memory corruption in SPS Application while requesting for public key in sorter TA.
Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in SPS-Applications
Memory corruption while processing finish_sign command to pass a rsp buffer.
Use After Free in Kernel
Memory corruption when there is failed unmap operation in GPU.
Use After Free in DSP Service
Memory corruption when two threads try to map and unmap a single node simultaneously.
Use After Free in HLOS
Memory corruption during concurrent access to server info object due to unprotected critical field.
Improper Restriction of Operation within the Bounds of a Memory Buffer in TZ Secure OS
Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.
Buffer copy without checking size of Input in Core
Memory corruption in Core while processing control functions.
Improper Restriction of Operations within the Bounds of a Memory Buffer in BT Controller
Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level.
Buffer Over-read in WLAN Firmware
Transient DOS while parse fils IE with length equal to 1.
Improper Authentication in Automotive OS
Transient DOS in Automotive OS due to improper authentication to the secure IO calls.
Buffer Over-read in WLAN Firmware
Transient DOS in WLAN Firmware while parsing rsn ies.