405,239 results · Feed
-
Unscored —
In multiple locations, there is a possible way to corrupt host allocator metadata in shared memory due to memory corrup…
-
Unscored —
In createDataFlowAsync of data_flow_manager.cc, there is a possible way to trigger an out of bounds write in shared mem…
-
Unscored —
In AudioSession::SendInternalEvent of AudioSession.cpp, there is a possible Double Free due to a logic error in the cod…
-
Unscored —
In edgetpu_group_clear_responses of edgetpu_group.c, there is a possible Use After Free due to a logic error in the cod…
-
Unscored —
In CommitToBuffer of hal_override_options.bundle.cc, there is a possible way to retain stale direct memory access mappi…
-
Unscored —
In EncodeT140 of TextRtpPayloadEncoderNode.cpp, there is a possible Heap Buffer Overflow due to a logic error in the co…
-
Unscored —
In on_vkUpdateDescriptorSetWithTemplateSized2GOOGLE of vk_decoder_global_state.cpp, there is a possible way to leak hos…
-
Medium 6.4
In multiple locations, there is a possible way to modify authenticated coprocessor firmware in shared memory before loa…
-
Unscored —
In getCarrierRestrictionStatus of PhoneInterfaceManager.java, there is a possible permission bypass due to a confused d…
-
Unscored —
In smmu_unmap_visit_leaf of arm-smmu-v3.c, there is a possible way to release active direct memory access page referenc…
-
Unscored —
In smmu_detach_dev of private/google-modules/iommu/arm-smmu-v3/drivers/iommu/arm/arm-smmu-v3/pkvm/arm-smmu-v3.c, there …
-
Unscored —
In multiple locations, there is a possible way to trigger an out of bounds read via an attestation comparison oracle du…
-
Unscored —
In port_shutdown of ipc.c, there is a possible Use After Free due to a race condition. This could lead to local escalat…
-
Unscored —
In km_os_regen_salt of storage.c, there is a possible way to recover deleted keys due to a logic error. This could lead…
-
Unscored —
In arm_lpae_split_blk_unmap of drivers/iommu/io-pgtable-arm-common.c, there is a possible Logic error due to a logic er…
-
Unscored —
In RecordApTx of efw_ap_transport.c, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could …
-
Unscored —
In TrustyKeyMintManager::VerifyHat of trusty_keymint_manager.cc, there is a possible Security check bypass due to a log…
-
Unscored —
In smmu_find_ste of smmu.c, there is a possible way to retain stale translation lookaside buffer entries across stream …
-
Unscored —
In multiple functions of PssSubscriptionManager.java, there is a possible way to spoof subscription switch results and …
-
Unscored —
In PackageSignatureChecker of SystemUIGoogleModule.java, there is a possible background activity launch due to a confus…
-
Unscored —
In _vqueue_get_avail_buf_locked of trusty/kernel/lib/trusty/vqueue.c, there is a possible Double-read / TOCTOU due to a…
-
Unscored —
In ac_remove_smmu_prot_internal of acfw_smmu.c, there is a possible Logic error due to a logic error in the code. This …
-
Medium 6.7
In handle_fips_hmac_req of hwcrypto_proxy.c, there is a possible heap buffer overflow due to missing bounds check. This…
-
Unscored —
In multiple locations, there is a possible way to trigger an out of bounds read and write in shared memory due to an in…
-
Unscored —
In multiple functions of sswrp_cpm.dtsi, there is a possible way to modify voltage control registers from non-secure so…
-
Unscored —
In multiple locations, there is a possible information disclosure due to a logic error in the code. This could lead to …
-
Unscored —
In aes256_cmac_sw of aes.rs, there is a possible way to forge message authentication codes over multi-block messages du…
-
Unscored —
In multiple functions of attestation_object.c, there is a possible way to disclose uninitialized secure element stack m…
-
Unscored —
In multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote cod…
-
Medium 6.7
In ac_set_ns_ipa_tbl of plat_trusty.c, there is a possible way to corrupt stream table entry configurations via unvalid…
-
Unscored —
In secure_transport_usecase_handshake of secure_transport.c, there is a possible way to bypass secure transport channel…
-
Unscored —
In GetSharedMemory of trusty_shared_memory_manager.cc, there is a possible way to trigger an out of bounds read via sig…
-
Medium 6.7
In km_read_data_response of keymaster.c, there is a possible way to trigger an out of bounds write on the heap due to a…
-
Unscored —
In TzSharedMemory of TzSharedMemory.c, there is a possible Heap buffer overflow due to a logic error in the code. This …
-
Unscored —
In multiple locations, there is a possible use-after-free due to a logic error in the code. This could lead to remote c…
-
Unscored —
In parse_prime256v1 of keymint_asn1.c, there is a possible Heap Buffer Overflow due to a logic error in the code. This …
-
Unscored —
In thread_free of thread.c, there is a possible way to corrupt kernel heap metadata on thread creation failure due to m…
-
Unscored —
In handle_dpm_image of seclib.rs, there is a possible Logic error due to a logic error in the code. This could lead to …
-
Unscored —
In insert_node of remap.c, there is a possible way to trigger an out of bounds write in the address remapping table due…
-
Unscored —
In N/A of gdmc/gsp/project/gdmc.mk, there is a possible Logic error due to a logic error in the code. This could lead t…