405,240 results · Feed
-
Unscored —
In multiple functions of AndroidManifest.xml, there is a possible way to trigger unauthorized firmware updates via expo…
-
Unscored —
In pic_timing of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead t…
-
Unscored —
In CMD_ENC_SET_PARAM of encoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead…
-
High 7.5
In s_gen_tile_param of multiple files, there is a possible way to trigger an out of bounds write in tile parameter arra…
-
Unscored —
In stpropnci_process_std of stpropnci_std.cc, there is a possible way to trigger an out of bounds write into global sta…
-
Unscored —
In chppWifiRangingEventNotification of clients/wifi.c, there is a possible Heap Buffer Overflow due to a logic error in…
-
Unscored —
In cnm_memset of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead t…
-
Medium 6.7
In update_user_consent of main.rs, there is a possible elevation of privilege due to uninitialized data. This could lea…
-
Unscored —
In multiple locations, there is a possible denial of service due to a logic error in the code. This could lead to local…
-
Unscored —
In multiple locations, there is a possible denial of service due to a logic error in the code. This could lead to local…
-
Medium 6.7
In HostLinkBase::chreIpiHandler of host_link.cc, there is a possible out-of-bounds write due to a missing bounds check.…
-
Unscored —
In multiple locations, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to rem…
-
Unscored —
In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local…
-
Medium 6.4
In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation …
-
Unscored —
In multiple locations, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local i…
-
Unscored —
In ac_get_prot_config of plat_trusty.c, there is a possible memory corruption due to improper input validation. This co…
-
Unscored —
In mfc_alloc_enc_roi_buffer of mfc_buf.c, there is a possible out-of-bounds write due to a heap buffer overflow. This c…
-
Unscored —
In aoc_unlocked_ioctl_handle_ion_fd of aoc.c, there is a possible type confusion due to improper input validation. This…
-
Unscored —
In BitmapImageBuffer of bitmap_image_buffer.h, there is a possible out-of-bounds write due to an integer overflow. This…
-
Unscored —
In NotifySipResponse of SessionEx.cpp, there is a possible way to corrupt memory via a dangling connection pointer in t…
-
Medium 6.7
In multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local esca…
-
Unscored —
In chppProcessDiscoverAllResponse of system/chre/chpp/clients/discovery.c, there is a possible Heap Buffer Overflow due…
-
Unscored —
In handleEvent of gscan.cpp, there is a possible way to trigger an out of bounds write on the heap due to a missing bou…
-
Unscored —
In createIntent of TimerAgent.java, there is a possible permission bypass due to a confused deputy. This could lead to …
-
Unscored —
In codec3p_secure of codec3p_secure, there is a possible Heap Buffer Overflow due to a missing bounds check. This could…
-
Medium 6.7
In multiple locations, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local …
-
Unscored —
In multiple functions of bitmap_image_buffer.h, there is a possible way to trigger an out of bounds write on the truste…
-
Unscored —
In smmu_config_l3tt of smmu.c, there is a possible permission bypass due to a logic error in the code. This could lead …
-
Unscored —
In cpm_mbox_power_ctrl_sswrp of cpm_mbox.c, there is a possible permission bypass due to a precondition check failure. …
-
Unscored —
In multiple locations, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote co…
-
Unscored —
In get_secure_boot_mode of auth.rs, there is a possible way to bypass root signature verification via fault injection d…
-
Unscored —
In authenticate of verify_image, there is a possible Signature verification logic bypass due to a logic error in the co…
-
Unscored —
In __mfc_core_nal_q_get_dec_metadata_sei_nal of mfc_core_nal_q.c, there is a possible out-of-bounds write due to a miss…
-
Unscored —
In tipc_dev_probe of tipc_virtio_dev.c, there is a possible way to corrupt memory via an off-by-one cleanup loop on pro…
-
Unscored —
In getChppAppState of chpp_init.cc, there is a possible way to trigger an out of bounds read and corrupt task control s…
-
Unscored —
In send_vdu_directive of gdmc/gsp/dev/bmsm/plat/lga/vdu.c, there is a possible Logic error due to a logic error in the …
-
Medium 6.7
In access_control_enable of multiple files, there is a possible way to release secure coprocessors from reset via uncla…
-
Unscored —
In EncodeLastScanBufferElement of data_manager.cc, there is a possible out-of-bounds write due to a logic error in the …
-
Unscored —
In GC2AvcDec of GC2AvcDec.cpp, there is a possible Logic error due to a logic error in the code. This could lead to loc…
-
Unscored —
In EuiccPort.buildUiccAccessRule of EuiccPort.java, there is a possible Confused Deputy due to a confused deputy. This …