Where
-Infinity
0
Severity
7.8
Use After Free
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory corruption while processing service requests.

First published (updated )
Severity
7.8
Use After Free
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory Corruption when executing system service routines due to improper handling of user input buffers.

First published (updated )
Severity
7.8
Use After Free
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.

First published (updated )
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory corruption when processing draw objects of incorrect type during graphics command list execution.

First published (updated )
Severity
7.8
Use After Free
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.

First published (updated )
Severity
7.1
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.

First published (updated )
Severity
7.8
Use After Free
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.

First published (updated )
Severity
6.7
Use After Free
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.

First published (updated )
Severity
6.7
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.

First published (updated )
Severity
6.7
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.

First published (updated )
Severity
6.7
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.

First published (updated )
Severity
6.7
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.

First published (updated )
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory corruption when non-secure loader rewrites page tables before secure memory initialization.

First published (updated )
Severity
6.6
AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L

Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.

First published (updated )
Severity
7.8
Use After Free
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory corruption while allocating buffers in DSP service.

First published (updated )
Severity
5.5
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Transient DOS while processing IOCTL call for image encoding.

First published (updated )
Severity
5.5
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Transient DOS while processing video packets received from video firmware.

First published (updated )
Severity
7.8
Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory corruption while processing user buffers.

First published (updated )
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

memory corruption while processing an image encoding completion event.

First published (updated )
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory corruption while processing a malformed license file during reboot.

First published (updated )
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory corruption while passing pages to DSP with an unaligned starting address.

First published (updated )
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory corruption while processing identity credential operations in the trusted application.

First published (updated )
Severity
6.7
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Memory corruption while parsing clock configuration data for a specific hardware type.

First published (updated )
Severity
7.8
Use After Free
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory corruption while deinitializing a HDCP session.

First published (updated )
Severity
6.7
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Memory corruption while processing a config call from userspace.

First published (updated )
Severity
6.7
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Memory corruption while handling sensor utility operations.

First published (updated )
Severity
6.7
Use After Free
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Memory corruption while accessing a synchronization object during concurrent operations.

First published (updated )
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory corruption while processing a secure logging command in the trusted application.

First published (updated )
Severity
6.6
Use After Free
AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L

Memory corruption while handling buffer mapping operations in the cryptographic driver.

First published (updated )
Severity
5.5
Infoleak
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.

First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203