997 results · Feed
-
High 7.8
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera_Linux
Memory corruption while submitting blob data to kernel space though IOCTL.
-
High 7.5
Reachable Assertion in Modem
Transient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE network.
-
High 7.8
Out-of-bounds Write in Video
Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
-
High 7.8
Buffer Copy Without Checking Size of Input in Computer Vision
Memory corruption while processing packet data with exceedingly large packet.
-
High 7.5
Buffer Over-read in WLAN Host
Transient DOS while handling beacon frames with invalid IE header length.
-
High 7.8
Use After Free in DSP Service
Memory corruption during sub-system restart while processing clean-up to free up resources.
-
High 7.8
Buffer Over-read in Camera
Memory corruption during the image encoding process.
-
High 7.8
Buffer Copy Without Checking Size of Input in Core Services
Memory corruption while processing data packets in diag received from Unix clients.
-
High 7.8
Double Free in Windows WLAN Host
Memory corruption while processing command message in WLAN Host.
-
High 7.8
Use After Free in Camera
Memory corruption while processing event close when client process terminates abruptly.
-
High 7.8
Use After Free in Display
Memory corruption while processing the TESTPATTERNCONFIG escape path.
-
High 7.8
Double Free in Display
Memory corruption while processing multiple simultaneous escape calls.
-
High 7.8
Out-of-bounds Write in Video
Memory corruption while executing timestamp video decode command with large input values.
-
High 7.8
Buffer Copy Without Checking Size of Input in Video
Memory corruption while processing manipulated payload in video firmware.
-
High 7.8
Incorrect Calculation of Buffer Size in Video
Memory corruption while processing video packets received from video firmware.
-
High 7.8
Use After Free in Display
Memory corruption while processing a private escape command in an event trigger.
-
High 7.5
Buffer Over-read in WLAN Embedded SW
Transient DOS while processing received beacon frame.
-
Critical 9.1
Improper Authentication in GPS_GNSS
Cryptographic issue occurs due to use of insecure connection method while downloading.
-
High 7.5
Buffer Over-read in WLAN Embedded SW
Transient DOS may occur while processing malformed length field in SSID IEs.
-
High 7.5
Buffer Over-read in WLAN Firmware
Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.
-
High 7.8
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Data HLOS - QX
Memory corruption while copying the result to the transmission queue which is shared between the virtual machine and the host.
-
High 7.8
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Data HLOS - QX
Memory corruption while copying the result to the transmission queue in EMAC.
-
Medium 6.2
NULL Pointer Dereference in SPS-HLOS
Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.
-
High 7.8
Double Free in SPS-HLOS
Memory corruption while retrieving the CBOR data from TA.
-
High 8.2
Buffer Over-read in Data HLOS - LNX
Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.
-
Medium 6.6
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Camera_Linux
Memory corruption while processing camera TPG write request.
-
High 7.1
Cryptographic Issues in Automotive
Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses.
-
Medium 5.3
Improper Validation of Array Index in Automotive Autonomy
Memory corruption while operating the mailbox in Automotive.
-
High 8.6
Incorrect Authorization in Graphics
Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
KEV Jun 3, 2025 -
High 7.5CVE-2025-27038 Exploited
Use After Free in Graphics
Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.
KEV Jun 3, 2025 -
High 7.8
Use After Free in Bluetooth HOST
memory corruption while processing IOCTL commands, when the buffer in write loopback mode is accessed after being freed.
-
High 7.5
Buffer Over-read in WLAN HAL
Transient DOS while processing the tone measurement response buffer when the response buffer is out of range.
-
High 7.8
Untrusted Pointer Dereference in DSP Service
Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.
-
High 7.8
Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service
Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC.
-
High 8.6CVE-2025-21480 Exploited
Incorrect Authorization in Graphics Windows
Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
KEV Jun 3, 2025 -
High 7.5
Buffer Over-read in WLAN Host Communication
Transient DOS while processing the EHT operation IE in the received beacon frame.
-
High 8.2
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.
-
High 8.2
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure may occur while processing goodbye RTCP packet from network.
-
High 8.2
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure may occur while decoding the RTP packet with invalid header extension from network.
-
High 8.2
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources.