Vulnerabilidades

Memory corruption while using alignments for memory allocation.

Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.

Memory Corruption when accessing buffers with invalid length during TA invocation.

Transient DOS when an LTE RLC packet with invalid TB is received by UE.

Memory corruption while processing identity credential operations in the trusted application.

Memory corruption while handling buffer mapping operations in the cryptographic driver.

Information disclosure while processing a firmware event.

Transient DOS while parsing video packets received from the video firmware.

Memory corruption while routing GPR packets between user and root when handling large data packet.

Memory corruption while calling the NPU driver APIs concurrently.

Transient DOS may occur while processing the country IE.

Memory corruption in display driver while detaching a device.

Memory corruption may occur while validating ports and channels in Audio driver.

Memory corruption caused by missing locks and checks on the DMA fence and improper synchronization.

Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.

Memory corruption while processing command in Glink linux.

Transient DOS during hypervisor virtual I/O operation in a virtual machine.

Memory corruption while processing camera use case IOCTL call.

Information disclosure while deriving keys for a session for any Widevine use case.

While processing the authentication message in UE, improper authentication may lead to information disclosure.

Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.

Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.

Memory corruption when BTFM client sends new messages over Slimbus to ADSP.

Memory corruption when Alternative Frequency offset value is set to 255.

Memory corruption while passing untrusted/corrupted pointers from DSP to EVA.