Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Memory corruption is possible when an attempt is made from userspace or console to write some haptics effects pattern to the haptics debugfs file.
Memory corruption during the network scan request.
Memory corruption while sending the persist buffer command packet from the user-space to the kernel space through the IOCTL call.
Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playback and record.
Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a driver.
Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers.
Memory corruption when a process invokes IOCTL calls from user-space to create a HAB virtual channel and another process invokes IOCTL calls to destr…
Memory corruption when the captureRead QDCM command is invoked from user-space.
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.
Memory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients.
Memory corruption while releasing shared resources in MinkSocket listener thread.
Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element (IE) of a beacon frame tha…
Cryptographic issue while parsing RSA keys in COBR format.
memory corruption when an invalid firehose patch command is invoked.
Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network.
Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem.
Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.
Memory corruption when memory mapped in a VBO is not unmapped by the GPU SMMU.
Memory corruption while processing graphics kernel driver request to create DMA fence.
Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus.
Memory corruption when keymaster operation imports a shared key.
Memory corruption during session sign renewal request calls in HLOS.
Transient DOS when NAS receives ODAC criteria of length 1 and type 1 in registration accept OTA.
Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.
Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager.
Information disclosure while handling beacon probe frame during scan entry generation in client side.
Transient DOS during music playback of ALAC content.
Permanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR container whose integrity check has failed, and the…
Information disclosure while handling beacon or probe response frame in STA.
Memory corruption when an invoke call and a TEE call are bound for the same trusted application.