8 known vulnerabilities · sorted by CVSS score
Memory corruption when BTFM client sends new messages over Slimbus to ADSP.
Memory corruption while processing command in Glink linux.
Memory corruption when the payload received from firmware is not as per the expected protocol size.
Memory corruption while processing video packets received from video firmware.
Memory corruption when allocating and accessing an entry in an SMEM partition.
Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.
Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
Information disclosure while processing a firmware event.