Vulnerabilidades

Memory corruption while performing finish HMAC operation when context is freed by keymaster.

Memory corruption in Hypervisor when platform information mentioned is not aligned.

Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked.

Information disclosure while handling T2LM Action Frame in WLAN Host.

Memory corruption when the IOCTL call is interrupted by a signal.

Memory corruption as GPU registers beyond the last protected range can be accessed through LPAC submissions.

Memory corruption when the payload received from firmware is not as per the expected protocol size.

Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.

Memory corruption when there is failed unmap operation in GPU.

Memory corruption while processing buffer initialization, when trusted report for certain report types are generated.

Memory corruption while processing finish_sign command to pass a rsp buffer.

Memory corruption in SPS Application while requesting for public key in sorter TA.

Cross Site Scripting (XSS) vulnerability in the feedback form of Online Flight Booking Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the airline parameter.

Cross Site Scripting (XSS) vulnerability in the add-airline form of Online Flight Booking Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the airline parameter.

Online Flight Booking Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the feedback form.

Memory corruption while processing MBSSID beacon containing several subelement IE.

Memory corruption while processing a QMI request for allocating memory from a DHMS supported subsystem.

Memory corruption while invoking IOCTLs calls in Automotive Multimedia.

Memory corruption while invoking HGSL IOCTL context create.

Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction sequence number.

Memory corruption in Audio while processing RT proxy port register driver.

Memory corruption in Core Services while executing the command for removing a single event listener.

Transient DOS while parse fils IE with length equal to 1.

Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point.

Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.