Vulnerabilidades

Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.

Memory corruption while processing fastboot commands with improperly formatted input.

Memory Corruption when processing display command line information due to improper initialization of a variable.

Memory Corruption when processing device identifier strings that exceed the expected maximum length.

Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.

Memory corruption while performing encryption and decryption commands.

Memory corruption while processing a malformed license file during reboot.

Memory corruption during PlayReady APP usecase while processing TA commands.

Memory corruption while selecting the PLMN from SOR failed list.

memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.

Memory corruption while performing private key encryption in trusted application.

Cryptographic issue while performing RSA PKCS padding decoding.

Transient DOS while processing an ANQP message.

Memory corruption while handling client exceptions, allowing unauthorized channel access.

Transient DOS while processing CCCH data when NW sends data with invalid length.

Information disclosure while processing the hash segment in an MBN file.

Information disclosure while reading data from an image using specified offset and size parameters.

Memory corruption may occur while attaching VM when the HLOS retains access to VM.

Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling.

Transient DOS may occur while parsing SSID in action frames.

Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.

Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass.

Information disclosure while creating MQ channels.

Cryptographic issues while generating an asymmetric key pair for RKP use cases.