Vulnerabilidades

Memory corruption in Core Platform while printing the response buffer in log.

Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use.

Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.

Memory corruption due to untrusted pointer dereference in automotive during system call.

Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.

Memory corruption in Automotive GPU while querying a gsl memory node.

Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request.

Memory corruption due to improper access control in kernel while processing a mapping request from root process.

Information disclosure in Kernel due to indirect branch misprediction.

Memory corruption due to double free in Core while mapping HLOS address to the list.

Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed.

information disclosure due to cryptographic issue in Core during RPMB read request.

Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation.

Memory corruption in HAB Memory management due to broad system privileges via physical address.

Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key.

Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information.

Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback.

Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment.

Memory corruption due to double free in core while initializing the encryption key.

Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity.

Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone.

Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD.

Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory.

Transient Denial-of-service in Automotive due to improper input validation while parsing ELF file.

Memory corruption due to stack-based buffer overflow in Core