2024

In dhd_prot_txstatus_process of dhd_msgbuf.c, there is a possible out of bounds write due to a missing bounds check. Thi

In DeregAcceptProcINT of cn_NrmmStateDeregInit.cpp, there is a possible denial of service due to a logic error in the co

there is a possible cellular denial of service due to a logic error in the code. This could lead to remote denial of ser

In gpu_pm_power_on_top_nolock of pixel_gpu_power.c, there is a possible compromise of protected memory due to a logic er

In lwis_initialize_transaction_fences of lwis_fence.c, there is a possible out of bounds write due to a missing bounds c

In set_secure_reg of sac_handler.c, there is a possible out of bounds read due to a missing bounds check. This could lea

In lwis_add_completion_fence of lwis_fence.c, there is a possible escalation of privilege due to type confusion. This co

Permission Bypass allowing attackers to disable HDCP 2.2 encryption by not completing the HDCP Key Exchange initializat

In pl330_dma_from_peri_start() of fp_spi_dma.c, there is a possible out of bounds write due to a missing bounds check. T

In fvp_freq_histogram_init of fvp.c, there is a possible Information Disclosure due to uninitialized data. This could le

In CellInfoListParserV2::FillCellInfo() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missi

In tpu_get_int_state of tpu.c, there is a possible information disclosure due to uninitialized data. This could lead to

In wl_notify_rx_mgmt_frame of wl_cfg80211.c, there is a possible out of bounds write due to an integer overflow. This co

there is a possible persistent Denial of Service due to test/debugging code left in a production build. This could lead

There is a possible escalation of privilege due to improperly used crypto. This could lead to remote escalation of privi

In handle_msg_shm_map_req of trusty/user/base/lib/spi/srv/tipc/tipc.c, there is a possible stack data disclosure due to

In handle_msg of main.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to loc

In sec_media_protect of media.c, there is a possible permission bypass due to a race condition. This could lead to local

In memcall_add of memlog.c, there is a possible buffer overflow due to improper input validation. This could lead to loc

In AcvpOnMessage of avcp.cpp, there is a possible EOP due to uninitialized data. This could lead to local escalation of

In circ_read of link_device_memory_legacy.c, there is a possible out of bounds write due to an incorrect bounds check. T

In ProtocolVsimOperationAdapter() of protocolvsimadapter.cpp, there is a possible out of bounds read due to a missing bo

In prepare_response_locked of lwis_transaction.c, there is a possible out of bounds write due to improper input validati

Remote prevention of access to cellular service with no user interaction (for example, crashing the cellular radio servi

In v4l2_smfc_qbuf of smfc-v4l2-ioctls.c, there is a possible out of bounds write due to a missing bounds check. This cou

In lwis_fence_signal of lwis_debug.c, there is a possible Use after Free due to improper locking. This could lead to loc

In gpu_pm_power_off_top_nolock of pixel_gpu_power.c, there is a possible compromise of protected memory due to a race co

In ProtocolCellIdentityParserV4::Parse() of protocolnetadapter.cpp, there is a possible out of bounds read due to a miss

In ProtocolCdmaCallWaitingIndAdapter::GetCwInfo() of protocolsmsadapter.cpp, there is a possible out of bounds read due

there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege wi

In BCMFASTPATH of dhd_msgbuf.c, there is a possible out of bounds write due to a missing bounds check. This could lead t

In bc_get_converted_received_bearer of bc_utilities.c, there is a possible out of bounds read due to a missing bounds ch

In _s5e9865_mif_set_rate of exynos_dvfs.c, there is a possible out of bounds read due to improper casting. This could le

In handle_init of goodix/main/main.c, there is a possible memory corruption due to type confusion. This could lead to lo

In sec_media_unprotect of media.c, there is a possible memory corruption due to a race condition. This could lead to loc

In lwis_process_transactions_in_queue of lwis_transaction.c, there is a possible use after free due to a use after free.

In pktproc_fill_data_addr_without_bm of link_rx_pktproc.c, there is a possible out of bounds write due to a missing boun

In aur_get_state of aurora.c, there is a possible information disclosure due to uninitialized data. This could lead to l

In prepare_response of lwis_periodic_io.c, there is a possible out of bounds write due to an integer overflow. This coul

In ss_AnalyzeOssReturnResUssdArgIe of ss_OssAsnManagement.c, there is a possible out of bounds read due to improper inpu

In hwbcc_ns_deprivilege of trusty/user/base/lib/hwbcc/client/hwbcc.c, there is a possible uninitialized stack data discl

In ProtocolPsDedicatedBearInfoAdapter::processQosSession of protocolpsadapter.cpp, there is a possible out of bounds rea

Deep Sea Electronics DSE855 Restart Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows ne

Deep Sea Electronics DSE855 Factory Reset Missing Authentication Denial-of-Service Vulnerability. This vulnerability all

Deep Sea Electronics DSE855 Multipart Value Handling Stack-Based Buffer Overflow Remote Code Execution Vulnerability. Th

Deep Sea Electronics DSE855 Multipart Boundary Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows

Deep Sea Electronics DSE855 Multipart Boundary Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vul

Deep Sea Electronics DSE855 Configuration Backup Missing Authentication Information Disclosure Vulnerability. This vulne

Dropbox Desktop Folder Sharing Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypas

A privilege escalation vulnerability was reported in Lenovo Service Bridge prior to version 5.0.2.17 that could allow op