405,240 results · Feed
-
Unscored —
In tone_mapping_info of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could…
-
Unscored —
In TzPipelineInputExtractor of TzPipelineInputExtractor.cpp, there is a possible Logic check bypass due to a logic erro…
-
Unscored —
In multiple functions of sswrp_cpm.dtsi, there is a possible way to modify global reset registers from non-secure softw…
-
Unscored —
In multiple locations, there is a possible way to trigger an unbounded loop in video decoder firmware due to a logic er…
-
High 7.5
In RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger a double free and process abo…
-
Unscored —
In CalculateSampleRate of cldma_alcedo.cc, there is a possible Heap Buffer Overflow due to a logic error in the code. T…
-
Unscored —
In platform_rio_ncp_wdt_handler of edgetpu_rio.c, there is a possible Use After Free due to a use after free. This coul…
-
Unscored —
In bindDataService of DataServiceManager.java, there is a possible way to retain privileged tunnel management permissio…
-
Unscored —
In multiple functions of mpu.c, there is a possible way to execute code from non-secure memory in the security coproces…
-
High 7.5
In DecodeHeaderComponent of SipStack.cpp, there is a possible way to trigger stack exhaustion via unbounded mutual recu…
-
Unscored —
In spm_alloc of encoder, there is a possible Heap Buffer Overflow due to a heap buffer overflow. This could lead to loc…
-
Unscored —
In tile_info of av1_decoder, there is a possible Heap Buffer Overflow due to a heap buffer overflow. This could lead to…
-
Unscored —
In stpropnci_prop_st_build_set_custom_polling_cmd of stpropnci_prop_st.cc, there is a possible way to trigger an out of…
-
Unscored —
In s_av1_dec_metadata_scalability of av1_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow…
-
Unscored —
In multiple locations, there is a possible way to recover cryptographic keys and forge authentication tags due to impro…
-
High 7.5
In SetDisplayName of RegInfoContact.cpp, there is a possible denial of service due to a missing null check. This could …
-
Unscored —
In FormCredentials of SipAuHelper.cpp, there is a possible way to disclose authentication credentials in cleartext via …
-
High 7.5
In StartTimer of UcePublishManager.cpp, there is a possible way to trigger a process abort during timer calculation due…
-
Unscored —
In trusty_context_switch of services/spd/trusty/trusty.c, there is a possible Secure world register state leak due to a…
-
Unscored —
In getUserDataPayload of GC2UserData.cpp, there is a possible Logic error due to a logic error in the code. This could …
-
Unscored —
In s_check_valid_tile_param_custom_tile of av1_encoder, there is a possible Non-Heap Buffer Overflow due to a buffer ov…
-
Unscored —
In stpropnci_cb_observe_mode_suspend of stpropnci_prop_android.cc, there is a possible way to trigger an out of bounds …
-
Unscored —
In notifyPollingLoopFrames of hal_fwlog.cc, there is a possible way to trigger an out of bounds read and write when for…
-
Unscored —
In max_num_ref_frames of avc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could…
-
Unscored —
In mmap of mman.c, there is a possible way to trigger an out of bounds read and write via mapping size truncation due t…
-
Unscored —
In decode of fw_vp9_dec_pic.c, there is a possible Logic error due to a logic error in the code. This could lead to loc…
-
Unscored —
In smmu_get_mair_idx of smmu.c, there is a possible way to apply incorrect memory attributes to direct memory access ma…
-
Unscored —
In multiple functions of simd_ctx.c, there is a possible way to disclose secure vector predicate and fault registers to…
-
Medium 6.7
In smmu_domain_config_s1 of arm-smmu-v3.c, there is a possible OOB Write due to a missing bounds check. This could lead…
-
Unscored —
In multiple locations, there is a possible way to dump secure cache lines into non-secure memory on warm reset due to a…
-
High 7.5
In Retry_MtsMessageInPending of MtsMessageController.cpp, there is a possible way to trigger memory exhaustion via leak…
-
Unscored —
In get_sswrp_state of cpm_mbox_srv/main.c, there is a possible Logic error due to a logic error in the code. This could…
-
Unscored —
In multiple locations, there is a possible way to zero arbitrary secure memory via unvalidated image body addresses due…
-
Unscored —
In ExecuteGraphCommand of multiple files, there is a possible way to trigger an out of bounds write via an oversized sc…
-
Unscored —
In bytes_are_equal of lib.rs, there is a possible way to recover authentication keys due to side channel information di…
-
Unscored —
In smmu_domain_config_s1 of arm-smmu-v3.c, there is a possible way to access stale stream table entries across reassign…
-
Unscored —
In IMG_vkCreateImageView of image_view.c, there is a possible way to trigger a use after free due to memory corruption.…
-
Unscored —
In multiple functions of rmmi_utility.c, there is a possible way to trigger an out of bounds write due to a missing bou…
-
Unscored —
In register_dump_dpa of sswrp_pcie.c, there is a possible Logic error due to a logic error in the code. This could lead…
-
Unscored —
In multiple functions of cn_Tai.cpp, there is a possible way to trigger an out of bounds write due to memory corruption…