97,012 results · Clear filters · Feed
-
High 8.4
In bindDataService of DataServiceManager.java, there is a possible way to retain privileged tunnel management permissio…
-
High 8.4
In multiple functions of mpu.c, there is a possible way to execute code from non-secure memory in the security coproces…
-
High 7.5
In DecodeHeaderComponent of SipStack.cpp, there is a possible way to trigger stack exhaustion via unbounded mutual recu…
-
High 7.8
In spm_alloc of encoder, there is a possible Heap Buffer Overflow due to a heap buffer overflow. This could lead to loc…
-
High 7.8
In tile_info of av1_decoder, there is a possible Heap Buffer Overflow due to a heap buffer overflow. This could lead to…
-
High 8.4
In stpropnci_prop_st_build_set_custom_polling_cmd of stpropnci_prop_st.cc, there is a possible way to trigger an out of…
-
High 7.8
In s_av1_dec_metadata_scalability of av1_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow…
-
High 7.5
In SetDisplayName of RegInfoContact.cpp, there is a possible denial of service due to a missing null check. This could …
-
High 7.5
In StartTimer of UcePublishManager.cpp, there is a possible way to trigger a process abort during timer calculation due…
-
High 7.8
In s_check_valid_tile_param_custom_tile of av1_encoder, there is a possible Non-Heap Buffer Overflow due to a buffer ov…
-
High 7.8
In max_num_ref_frames of avc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could…
-
High 7.5
In Retry_MtsMessageInPending of MtsMessageController.cpp, there is a possible way to trigger memory exhaustion via leak…
-
High 8.4
In ExecuteGraphCommand of multiple files, there is a possible way to trigger an out of bounds write via an oversized sc…
-
High 8.8
In multiple functions of cn_Tai.cpp, there is a possible way to trigger an out of bounds write due to memory corruption…
-
High 7.8
In pic_timing of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead t…
-
High 7.8
In CMD_ENC_SET_PARAM of encoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead…
-
High 7.5
In s_gen_tile_param of multiple files, there is a possible way to trigger an out of bounds write in tile parameter arra…
-
High 8.4
In stpropnci_process_std of stpropnci_std.cc, there is a possible way to trigger an out of bounds write into global sta…
-
High 8.8
In chppWifiRangingEventNotification of clients/wifi.c, there is a possible Heap Buffer Overflow due to a logic error in…
-
High 7.8
In cnm_memset of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead t…
-
High 7.8
In mfc_alloc_enc_roi_buffer of mfc_buf.c, there is a possible out-of-bounds write due to a heap buffer overflow. This c…
-
High 7.8
In codec3p_secure of codec3p_secure, there is a possible Heap Buffer Overflow due to a missing bounds check. This could…
-
High 7.8
In multiple functions of bitmap_image_buffer.h, there is a possible way to trigger an out of bounds write on the truste…
-
High 8.4
In getChppAppState of chpp_init.cc, there is a possible way to trigger an out of bounds read and corrupt task control s…
-
High 8.4
In PresenceDecoderV1::DecodeDataElements of presence_decoder_v1.cc, there is a possible out-of-bounds write due to a mi…
-
High 8.4
In createDataFlowAsync of data_flow_manager.cc, there is a possible way to trigger an out of bounds write in shared mem…
-
High 7.8
In edgetpu_group_clear_responses of edgetpu_group.c, there is a possible Use After Free due to a logic error in the cod…
-
High 8.4
In CommitToBuffer of hal_override_options.bundle.cc, there is a possible way to retain stale direct memory access mappi…
-
High 8.4
In on_vkUpdateDescriptorSetWithTemplateSized2GOOGLE of vk_decoder_global_state.cpp, there is a possible way to leak hos…
-
High 7.8
In smmu_detach_dev of private/google-modules/iommu/arm-smmu-v3/drivers/iommu/arm/arm-smmu-v3/pkvm/arm-smmu-v3.c, there …
-
High 7.0
In port_shutdown of ipc.c, there is a possible Use After Free due to a race condition. This could lead to local escalat…
-
High 7.8
In arm_lpae_split_blk_unmap of drivers/iommu/io-pgtable-arm-common.c, there is a possible Logic error due to a logic er…
-
High 7.8
In RecordApTx of efw_ap_transport.c, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could …
-
High 8.4
In smmu_find_ste of smmu.c, there is a possible way to retain stale translation lookaside buffer entries across stream …
-
High 8.8
In PackageSignatureChecker of SystemUIGoogleModule.java, there is a possible background activity launch due to a confus…
-
High 7.8
In ac_remove_smmu_prot_internal of acfw_smmu.c, there is a possible Logic error due to a logic error in the code. This …
-
High 8.4
In multiple locations, there is a possible way to trigger an out of bounds read and write in shared memory due to an in…
-
High 8.4
In aes256_cmac_sw of aes.rs, there is a possible way to forge message authentication codes over multi-block messages du…
-
High 8.4
In secure_transport_usecase_handshake of secure_transport.c, there is a possible way to bypass secure transport channel…
-
High 7.8
In TzSharedMemory of TzSharedMemory.c, there is a possible Heap buffer overflow due to a logic error in the code. This …