Vulnerabilidades

Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.

Cryptographic issue while performing RSA PKCS padding decoding.

Transient DOS while processing an ANQP message.

Information disclosure while processing the hash segment in an MBN file.

Information disclosure while reading data from an image using specified offset and size parameters.

Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.

Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.

Information disclosure may occur while processing goodbye RTCP packet from network.

Information disclosure may occur while decoding the RTP packet with invalid header extension from network.

Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources.

Memory corruption may occur while attaching VM when the HLOS retains access to VM.

Memory corruption while processing multiple IOCTL calls from HLOS to DSP.

Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation.

Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass.

Information disclosure while creating MQ channels.

There may be information disclosure during memory re-allocation in TZ Secure OS.

Memory corruption when allocating and accessing an entry in an SMEM partition continuously.

Memory corruption during GNSS HAL process initialization.

Memory corruption while handling session errors from firmware.

Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it.

Information disclosure while sending implicit broadcast containing APP launch information.

Transient DOS while handling PS event when Program Service name length offset value is set to 255.

Memory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients.

memory corruption when an invalid firehose patch command is invoked.