CVE Vulnerability Catalog

In the TFA module, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained System privileges. User interaction is not required for exploitation.

In wlan STA FW, logging issues could cause the system to become unresponsive, leading to remote (proximal/adjacent) denial of service without additional execution privileges and without user interaction.

In geniezone, a missing bounds check could lead to an out-of-bounds write, allowing local escalation of privilege if the attacker already has System privilege. No user interaction is needed.

In Audio HAL, a heap buffer overflow could lead to an out-of-bounds write, causing local denial of service. User execution privileges are required, but no user interaction is needed.

In Audio HAL, a heap buffer overflow could lead to an out-of-bounds write, causing local denial of service. User execution privileges are required, but no user interaction is needed.

In the display component, a missing bounds check could lead to an out-of-bounds write, allowing local escalation of privilege if the attacker already has System privilege. No user interaction is needed.

In ccci, a missing bounds check could lead to an out-of-bounds read, causing local denial of service. User execution privileges are required, but no user interaction is needed.

In the display component, a missing bounds check could lead to an out-of-bounds write, allowing local escalation of privilege if the attacker already has System privilege. No user interaction is needed.

In the display component, a race condition could lead to escalation of privilege if the attacker already has System privilege. No user interaction is needed.

In the display component, there is a potential memory corruption due to use after free. This could lead to local escalation of privilege if an attacker already has System privilege. User interaction is not required for exploitation.

In the TFA component, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local denial of service if an attacker already has System privilege. User interaction is not required for exploitation.

In the DA component, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local denial of service if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not required for exploitation.

In the Telephony component, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not required for exploitation.

In the trusted_mem component, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if an attacker already has System privilege. User interaction is required for exploitation.

In the apusys component, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege if an attacker already has System privilege. User interaction is not required for exploitation.

In the apusys component, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if an attacker already has System privilege. User interaction is not required for exploitation.

In the sec boot component, there is a possible escalation of privilege due to a heap buffer overflow. This could lead to local escalation of privilege if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not required for exploitation.

In the HEVC decoder, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote escalation of privilege if an attacker already has System privilege. User interaction is not required for exploitation.

In mz-automation libiec61850 up to version 1.6.1, a vulnerability in the Reporting_RCBWriteAccessHandler function in reporting.c causes a free of memory not on the heap. It can be exploited remotely and a public exploit exists.

In Bouncy Castle for Java before 1.85, LDAP filter injection exists in the legacy jdk1.4 LDAPStoreHelper component.