997 results · Feed
-
Medium 6.5
Reachable Assertion in Modem
Transient DOS when an LTE RLC packet with invalid TB is received by UE.
-
Medium 6.5
Buffer Over-read in WLAN Firmware
Transient DOS when processing a received frame with an excessively large authentication information element.
-
High 7.8
Buffer Copy Without Checking Size of Input in Camera
Memory Corruption while processing IOCTL call to update sensor property settings with invalid input parameters.
-
High 7.8
Use After Free in Graphics
Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.
-
High 7.8
Improper Release of Memory Before Removing Last Reference in Graphics
Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.
-
High 7.1
Exposed Dangerous Method or Function in HLOS
Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.
-
Medium 6.8
Integer Overflow or Wraparound in Automotive
Memory corruption while calculating offset from partition start point.
-
Medium 6.8
Integer Overflow or Wraparound in Automotive
Memory corruption when calculating oversized partition sizes without proper checks.
-
High 7.8
Use After Free in Secure Processor
Memory Corruption when multiple threads simultaneously access a memory free API.
-
High 7.8
Use After Free in Secure Processor
Memory Corruption when user space address is modified and passed to mem_free API, causing kernel memory to be freed inadvertently.
-
High 7.8
Double Free in Graphics
Memory corruption occurs when a secure application is launched on a device with insufficient memory.
-
Medium 6.5
Buffer Over-read in WLAN Firmware
Transient DOS while parsing a WLAN management frame with a Vendor Specific Information Element.
-
High 7.8
Buffer Copy Without Checking Size of Input in DSP Service
Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations.
-
High 7.8
Improper Validation of Array Index in Automotive Linux OS
Memory corruption when accessing resources in kernel driver.
-
High 7.8
Buffer Copy without Checking Size of Input in DSP Service
Memory corruption while passing pages to DSP with an unaligned starting address.
-
High 7.8
Untrusted Pointer Dereference in Camera
Memory corruption while preprocessing IOCTLs in sensors.
-
Medium 5.5
Information Exposure in Computer Vision
Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
-
High 7.8
Double Free in Video
Memory Corruption when multiple threads concurrently access and modify shared resources.
-
High 7.8
Use of Uninitialized Variable in HLOS
Memory corruption while processing identity credential operations in the trusted application.
-
High 7.8
Out-of-bounds Write in HLOS
Memory corruption while processing a secure logging command in the trusted application.
-
High 8.4
Reusing a Nonce, Key Pair in Encryption in Automotive Platform
Cryptographic issue may occur while encrypting license data.
-
Medium 6.7
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver
Memory corruption while handling sensor utility operations.
-
High 7.8
Untrusted Pointer Dereference in Video
Memory corruption while processing a video session to set video parameters.
-
High 7.8
Use After Free in HLOS
Memory corruption while deinitializing a HDCP session.
-
Medium 6.7
Use After Free in Camera Driver
Memory corruption while accessing a synchronization object during concurrent operations.
-
Medium 6.7
Use After Free in Camera Driver
Memory corruption while performing sensor register read operations.
-
Medium 6.7
Buffer Copy Without Checking Size of Input in Camera Driver
Memory corruption while parsing clock configuration data for a specific hardware type.
-
Medium 6.7
Buffer Copy Without Checking Size of Input in Camera Driver
Memory corruption while processing shared command buffer packet between camera userspace and kernel.
-
Medium 6.6
Use After Free in HLOS
Memory corruption while handling buffer mapping operations in the cryptographic driver.
-
Medium 6.7
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver
Memory corruption while processing a config call from userspace.
-
Medium 6.1
Buffer Over-read in Video
Information disclosure while processing a firmware event.
-
Medium 5.5
Buffer Over-read in Video
Transient DOS while parsing video packets received from the video firmware.
-
High 7.8
Untrusted Pointer Dereference in Camera
Memory Corruption when processing IOCTLs for JPEG data without verification.
-
High 7.8
Incorrect Authorization in Boot
Memory corruption while loading an invalid firmware in boot loader.
-
Critical 9.0
Buffer Copy Without Checking Size of Input in Boot
Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication.
-
High 7.8
Use After Free in DSP Service
Memory corruption while handling concurrent memory mapping and unmapping requests from a user-space application.
-
Medium 6.5
Untrusted Pointer Dereference in TZ Firmware
Information disclosure while processing system calls with invalid parameters.
-
High 7.8
Integer Overflow or Wraparound in Audio
Memory corruption while routing GPR packets between user and root when handling large data packet.
-
High 7.8
Use After Free in Automotive Linux OS
Memory corruption while handling IOCTL calls to set mode.
-
High 7.8
Buffer Copy Without Checking Size of Input in Core Services
Memory corruption while copying packets received from unix clients.