Vulnerabilidades

Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.

Memory Corruption when processing device identifier strings that exceed the expected maximum length.

Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.

Information Disclosure when resetting device to factory default settings through powerline interface allows unauthorized access to device configuration.

Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection.

Memory Corruption when using deprecated DMABUF IOCTL calls to manage video memory.

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.

Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation.

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.

Memory corruption while processing a frame request from user.

Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.

Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling.

Memory corruption while using alignments for memory allocation.

Memory Corruption when adding user-supplied data without checking available buffer space.

Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.

Memory Corruption when accessing buffers with invalid length during TA invocation.

Memory corruption occurs when a secure application is launched on a device with insufficient memory.

Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.

Memory corruption while processing identity credential operations in the trusted application.

Memory corruption while processing a secure logging command in the trusted application.

Memory corruption while handling sensor utility operations.

Memory corruption while deinitializing a HDCP session.

Memory corruption while accessing a synchronization object during concurrent operations.