241 results · Clear filters · Feed
-
Medium 6.7
Use After Free in Camera Driver
Memory corruption while performing sensor register read operations.
-
Medium 6.7
Buffer Copy Without Checking Size of Input in Camera Driver
Memory corruption while parsing clock configuration data for a specific hardware type.
-
Medium 6.7
Buffer Copy Without Checking Size of Input in Camera Driver
Memory corruption while processing shared command buffer packet between camera userspace and kernel.
-
Medium 6.6
Use After Free in HLOS
Memory corruption while handling buffer mapping operations in the cryptographic driver.
-
Medium 6.7
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver
Memory corruption while processing a config call from userspace.
-
Medium 6.1
Buffer Over-read in Video
Information disclosure while processing a firmware event.
-
Medium 5.5
Buffer Over-read in Video
Transient DOS while parsing video packets received from the video firmware.
-
Medium 6.5
Untrusted Pointer Dereference in TZ Firmware
Information disclosure while processing system calls with invalid parameters.
-
Medium 6.7
Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS
Information disclosure while exposing internal TA-to-TA communication APIs to HLOS
-
Medium 6.5
Reachable Assertion in BT Controller
Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.
-
Medium 6.1
Buffer Over-read in Automotive Software platform based on QNX
Information disclosure while processing message from client with invalid payload.
-
Medium 6.1
Buffer Over-read in Core Services
Information disclosure while registering commands from clients with diag through diagHal.
-
Medium 5.5
Buffer Over-read in Camera
Transient DOS while processing IOCTL call for image encoding.
-
Medium 6.1
Buffer Over-read in Video
Information disclosure while processing batch command execution in Video driver.
-
Medium 5.5
Buffer Over-read in Video
Transient DOS while processing video packets received from video firmware.
-
Medium 6.5
Improper Input Validation in TZ Firmware
Information disclosure may occur while processing the hypervisor log.
-
Medium 6.6
Detection of Error Condition Without Action in Computer Vision
Memory corruption may occur while processing IOCTL call for DMM/WARPNCC CONFIG request.
-
Medium 6.1
Buffer Over-read in Video
Information disclosure when Video engine escape input data is less than expected minimum size.
-
Medium 6.1
Buffer Over-read in Video
Information disclosure while running video usecase having rogue firmware.
-
Medium 6.1
Buffer Over-read in Audio
information disclosure while invoking calibration data from user space to update firmware size.
-
Medium 5.5
Buffer Copy Without Checking Size of Input in Automotive Vehicle Networks
Information disclosure while processing a packet at EAVB BE side with invalid header length.
-
Medium 5.5
Leftover Debug Code in Secure Element
Information disclosure while capturing logs as eSE debug messages are logged.
-
Medium 6.5
Out-of-bounds Read in Core
Information disclosure while processing the hash segment in an MBN file.
-
Medium 6.5
Out-of-bounds Read in Core
Information disclosure while reading data from an image using specified offset and size parameters.
-
Medium 6.1
Buffer Over-read in Automotive OS Platform Android
Information disclosure while opening a fastrpc session when domain is not sanitized.
-
Medium 6.2
NULL Pointer Dereference in SPS-HLOS
Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.
-
Medium 6.6
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Camera_Linux
Memory corruption while processing camera TPG write request.
-
Medium 5.3
Improper Validation of Array Index in Automotive Autonomy
Memory corruption while operating the mailbox in Automotive.
-
Medium 6.6
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver
Memory corruption may occur while processing the OIS packet parser.
-
Medium 6.6
Use of Out-of-range Pointer Offset in Camera Driver
Memory corruption while handling test pattern generator IOCTL command.
-
Medium 6.6
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver
Memory corruption while processing I2C settings in Camera driver.
-
Medium 6.6
Use After Free in Computer Vision
Memory corruption while processing IOCTL command to handle buffers associated with a session.
-
Medium 6.6
Buffer Copy Without Checking Size of Input in Audio
Memory corruption may occur while processing voice call registration with user.
-
Medium 6.6
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio
Memory corruption while processing an IOCTL call to set mixer controls.
-
Medium 6.7
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Camera
Memory corruption can occur during context user dumps due to inadequate checks on buffer length.
-
Medium 6.6
Use After Free in Secure Processor
Memory corruption while handling multiple IOCTL calls from userspace to operate DMA operations.
-
Medium 6.6
Out-of-bounds Write in Audio
Memory corruption while sound model registration for voice activation with audio kernel driver.
-
Medium 6.6
Use of Out-of-range Pointer Offset in Camera Driver
Memory corruption may occur during IO configuration processing when the IO port count is invalid.
-
Medium 6.7
Buffer Over-read in Camera Driver
Memory corruption due to improper bounds check while command handling in camera-kernel driver.
-
Medium 6.6
Out-of-bounds Write in Camera Driver
Memory corruption while handling schedule request in Camera Request Manager(CRM) due to invalid link count in the corresponding session.