997 results · Feed
-
High 7.8
Buffer Copy Without Checking Size of Input in Biometrics
Memory Corruption when handling malformed request parameters in the fingerprint TA.
-
High 8.1
Missing Authentication for Critical Function in Data Modem
Cryptographic Issue while processing registration requests with malformed or missing authentication parameters.
-
Medium 6.5
Exposure of Private Personal Information to an Unauthorized Actor in Data Modem
Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling.
-
Medium 6.5
Integer Underflow (Wrap or Wraparound) in WLAN Host
Information Disclosure when processing wireless network channel switch information with improperly formatted length fields.
-
Medium 6.7
Buffer Copy Without Checking Size of Input in Bluetooth HOST
Memory Corruption when processing registry values with incorrect types using a direct query method.
-
High 7.8
Integer Overflow or Wraparound in Data Network Stack & Connectivity
Memory corruption while processing a packet with a size close to the maximum allowed value.
-
High 7.8
Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service
Memory Corruption when processing asynchronous input parameters due to improper handling of modified values between check and use.
-
High 8.8
Stack-based Buffer Overflow in WLAN Host
Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.
-
Medium 5.3
Out-of-bounds Write in Camera Driver
Memory Corruption when updating prepared commands with invalid port indices based on user space input exceeds supported read client limits.
-
High 7.1
Reusing a Nonce, Key Pair in Encryption in HLOS
Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security.
-
High 7.8
Buffer Over-read in Windows Compute
Memory Corruption when allocating memory with sizes that exceed the maximum allowed value.
-
Medium 5.3
Out-of-bounds Write in Camera Driver
Memory Corruption when validating input batch size and buffer plane count exceeds maximum allowed values.
-
Medium 5.3
Out-of-bounds Write in Camera Driver
Memory Corruption when handling flash commands due to outdated LED count values being used after userspace modification.
-
Medium 5.3
Out-of-bounds Write in Camera Driver
Memory Corruption when parsing jpeg commands due to unaccounted extra writes to the buffer during validation checks.
-
Medium 6.6
Use After Free in Computer Vision
Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input.
-
Medium 6.6
Use After Free in Computer Vision
Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input due to accessing already freed memory.
-
Medium 6.6
Use After Free in Computer Vision
Memory Corruption when invoking device input/output control operations for mapping and unmapping persistent memory buffers due to improper synchronization.
-
High 8.8
Buffer Copy Without Checking Size of Input in Secure Processor
Memory corruption while using Strongbox due to buffer overflow.
-
High 8.8
Improper Validation of Array Index in Secure Processor
Memory corruption while using Strongbox due to missing bounds check.
-
High 7.8
Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service
Memory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications.
-
High 7.8
Out-of-bounds Write in DSP Service
Memory corruption while processing multiple IOCTL command for escape operations.
-
High 7.8
Out-of-bounds Read in DSP Service
Memory corruption while processing IOCTL calls for escape operations.
-
High 7.2
Improper Validation of Syntactic Correctness of Input in Display
Memory Corruption when processing fastboot commands to set display mode.
-
High 7.2
Improper Validation of Syntactic Correctness of Input in Display
Memory corruption while processing fastboot commands with improperly formatted input.
-
High 7.1CVE-2026-24090 Public exploit
Missing Authentication for Critical Function in HLOS
Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow.
-
High 7.2
Improper Validation of Syntactic Correctness of Input in Kernel
Memory corruption while processing fastboot commands with invalid input.
-
High 8.2CVE-2026-24088 Public exploit
Missing Authentication for Critical Function in Boot
Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.
-
High 7.2
Improper Validation of Syntactic Correctness of Input in Kernel
Memory corruption while processing fastboot OEM commands.
-
High 7.2
Stack-based Buffer Overflow in Display
Memory Corruption when processing display command line information due to improper initialization of a variable.
-
Medium 6.7
Out-of-bounds Write in Windows Compute
Memory Corruption when sending random number generator command with insufficient output buffer size.
-
Medium 6.7
Stack-based Buffer Overflow in Windows Compute
Memory Corruption when output buffer size is smaller than input buffer size during data copying operation.
-
Medium 6.7
Stack-based Buffer Overflow in Windows Compute
Memory corruption in windows drivers while sending incorrect trusted application request
-
Medium 6.7
Out-of-bounds Write in Core Services
Memory corruption in diagnostic services due to absence of input validation
-
Medium 6.4
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver
Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.
-
Medium 5.5
Buffer Over-read in WLAN Host Communication
Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.
-
High 7.8
NULL Pointer Dereference in HLOS
Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization.
-
High 7.8
Out-of-bounds Write in HLOS
Memory Corruption when processing device identifier strings that exceed the expected maximum length.
-
High 7.8
NULL Pointer Dereference in SPS Applications
Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.
-
Medium 6.5
Exposure of Sensitive Information Through Metadata in Powerline Communication Firmware
Information Disclosure when resetting device to factory default settings through powerline interface allows unauthorized access to device configuration.
-
Critical 9.6
Incorrect authorization in PLC FW
Buffer overflow due to incorrect authorization in PLC FW