997 results · Feed
-
High 7.8
Buffer Over-read in BT Controller
Memory corruption due to global buffer overflow when a test command uses an invalid payload type.
-
High 7.8
Double Free in Video
Memory corruption due to double free when multiple threads race to set the timestamp store.
-
High 7.8
Use After Free in Automotive Software platform based on QNX
Memory corruption while handling repeated memory unmap requests from guest VM.
-
High 7.8
Improper Input Validation in Automotive Software platform based on QNX
Memory corruption while processing data sent by FE driver.
-
High 7.8
Use After Free in Automotive Software platform based on QNX
Memory corruption while processing message in guest VM.
-
High 7.8
Use After Free in Camera Driver
Memory corruption while processing config_dev IOCTL when camera kernel driver drops its reference to CPU buffers.
-
Medium 6.1
Buffer Over-read in Video
Information disclosure when Video engine escape input data is less than expected minimum size.
-
Critical 9.8
Improper Validation of Array Index in Multi-Mode Call Processor
Memory corruption while selecting the PLMN from SOR failed list.
-
Medium 6.1
Buffer Over-read in Video
Information disclosure while running video usecase having rogue firmware.
-
High 7.8
Improper Access Control Applied to Mirrored or Aliased Memory Regions in Hypervisor
memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.
-
Medium 6.1
Buffer Over-read in Audio
information disclosure while invoking calibration data from user space to update firmware size.
-
High 8.2
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.
-
High 8.2
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.
-
High 8.2
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.
-
Critical 9.8
Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity
Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.
-
High 7.1
Cryptographic Issues in Core
Cryptographic issue while performing RSA PKCS padding decoding.
-
High 7.8
Buffer Copy Without Checking Size of Input in HLOS
Memory corruption while performing private key encryption in trusted application.
-
High 7.8
Buffer Copy Without Checking Size of Input in Computer Vision
Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake.
-
High 7.5
Exposure of Sensitive Information Through Metadata in Powerline Communication Firmware
Information disclosure while accessing and modifying the PIB file of a remote device via powerline.
-
High 7.8
Time-of-check Time-of-use (TOCTOU) Race Condition in Display
Memory corruption while processing simultaneous requests via escape path.
-
High 7.8
Improper Validation of Array Index in Bluetooth HOST
Memory corruption while processing IOCTL command with larger buffer in Bluetooth Host.
-
High 7.5
Reachable Assertion in WLAN Firmware
Transient DOS while creating NDP instance.
-
Medium 5.5
Buffer Copy Without Checking Size of Input in Automotive Vehicle Networks
Information disclosure while processing a packet at EAVB BE side with invalid header length.
-
High 7.3
Buffer Copy Without Checking Size of Input in Powerline Communication Firmware
Memory corruption while processing specific files in Powerline Communication Firmware.
-
High 7.8
Untrusted Pointer Dereference in DSP Service
Memory corruption while processing DDI command calls.
-
High 7.8
Buffer Over-read in Camera
Memory corruption while processing an IOCTL command with an arbitrary address.
-
High 7.8
Improper Validation of Array Index in DSP Service
Memory corruption while processing DDI call with invalid buffer.
-
High 7.5
Reachable Assertion in WLAN Firmware
Transient DOS while processing an ANQP message.
-
High 7.5
Buffer Over-read in WLAN Firmware
Transient DOS while processing a frame with malformed shared-key descriptor.
-
High 7.8
Improper Access Control in Automotive Multimedia
Memory corruption while handling client exceptions, allowing unauthorized channel access.
-
High 7.5
Improper Input Validation in Modem
Transient DOS while processing CCCH data when NW sends data with invalid length.
-
High 7.8
Use After Free in BTHOST
Memory corruption while processing commands from A2dp sink command queue.
-
High 7.8
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera_Linux
Memory corruption when using Virtual cdm (Camera Data Mover) to write registers.
-
Medium 5.5
Leftover Debug Code in Secure Element
Information disclosure while capturing logs as eSE debug messages are logged.
-
Medium 6.5
Out-of-bounds Read in Core
Information disclosure while processing the hash segment in an MBN file.
-
Medium 6.5
Out-of-bounds Read in Core
Information disclosure while reading data from an image using specified offset and size parameters.
-
High 7.8
Out-of-bounds Write in Camera_Linux
Memory corruption when programming registers through virtual CDM.
-
High 7.8
Use After Free in NPU
Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously.
-
Medium 6.1
Buffer Over-read in Automotive OS Platform Android
Information disclosure while opening a fastrpc session when domain is not sanitized.
-
High 7.8
Use After Free in NPU
Memory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently.