Vulnerabilidades

Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.

Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.

Transient DOS when processing target power rate tables during channel configuration.

Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection.

Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling.

Memory corruption while using alignments for memory allocation.

Memory Corruption when processing invalid user address with nonstandard buffer address.

Memory Corruption when adding user-supplied data without checking available buffer space.

Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.

Memory Corruption when accessing buffers with invalid length during TA invocation.

Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.

Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.

Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.

Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.

Memory corruption while processing identity credential operations in the trusted application.

Memory corruption while handling sensor utility operations.

Memory corruption while processing shared command buffer packet between camera userspace and kernel.

Memory corruption while handling buffer mapping operations in the cryptographic driver.

Memory corruption while processing a config call from userspace.

Information disclosure while processing a firmware event.

Transient DOS while parsing video packets received from the video firmware.

Memory corruption while copying packets received from unix clients.

Information disclosure while exposing internal TA-to-TA communication APIs to HLOS

Memory corruption during video playback when video session open fails with time out error.

Memory corruption while routing GPR packets between user and root when handling large data packet.