21 known vulnerabilities · sorted by CVSS score
Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs.
Memory corruption when triggering a subsystem crash with an out-of-range identifier.
Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources.
Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls.
Memory corruption while loading an invalid firmware in boot loader.
Memory corruption while processing a malformed license file during reboot.
Memory corruption while processing client message during device management.
Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls.
Memory corruption while handling different IOCTL calls from the user-space simultaneously.
Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.
Memory corruption while using alignments for memory allocation.
Memory Corruption when accessing trusted execution environment without proper privilege check.
Memory corruption during PlayReady APP usecase while processing TA commands.
Memory Corruption when accessing buffers with invalid length during TA invocation.
Memory corruption while processing large input data from a remote source via a communication interface.
Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.
Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.
Memory corruption when calculating oversized partition sizes without proper checks.
Memory corruption while calculating offset from partition start point.
Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.