Search vulnerabilities
Improper Access Control in Kernel
Improper Access to the VM resource manager can lead to Memory Corruption.
Buffer Over-read in WLAN HAL
Information disclosure in WLAN HAL while handling the WMI state info command.
Buffer Copy Without Checking Size of Input in Audio
Memory corruption in Audio while processing IIR config data from AFE calibration block.
Buffer copy without checking size of Input in Core
Memory corruption in Core while processing control functions.
NULL Pointer Dereference in WLAN Firmware
Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.
Untrusted Pointer Dereference in Video
Memory corruption in video while parsing invalid mp2 clip.
Use After Free in Graphics Linux
Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.
Buffer Over-read in WLAN HAL
Information disclosure in WLAN HAL while handling command through WMI interfaces.
Buffer Over-read in WLAN Firmware
Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.
Buffer Over-read in IOE Firmware
Information disclosure in IOE Firmware while handling WMI command.
Buffer Copy Without Checking Size of Input in Trusted Execution Environment
Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked.
Buffer Over-read in Data Modem
Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
Improper Authentication in Core
Memory Corruption in Core due to secure memory access by user while loading modem image.
Buffer Copy Without Checking Size of Input in WLAN HOST
Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.
Use of Out-of-range Pointer Offset in Qualcomm IPC
Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.
Buffer Copy Without Checking Size of Input in SPS Applications
Memory corruption in SPS Application while requesting for public key in sorter TA.
Improper Input Validation in Modem
Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.
Improper Authentication in Modem
While processing the authentication message in UE, improper authentication may lead to information disclosure.
Improper Authorization in SPS-HLOS
Information disclosure while deriving keys for a session for any Widevine use case.