Where
-Infinity
0
Severity
7.8
Use After Free
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory corruption while processing service requests.

First published (updated )
Severity
7.8
Use After Free
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory Corruption when executing system service routines due to improper handling of user input buffers.

First published (updated )
Severity
7.8
Use After Free
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.

First published (updated )
Severity
7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Transient DOS when processing a continuous receive command with a zero-sized global configuration override.

First published (updated )
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory corruption when processing draw objects of incorrect type during graphics command list execution.

First published (updated )
Severity
7.8
Use After Free
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.

First published (updated )
Severity
7.1
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.

First published (updated )
Severity
7.8
Use After Free
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.

First published (updated )
Severity
6.7
Use After Free
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.

First published (updated )
Severity
6.7
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.

First published (updated )
Severity
6.7
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.

First published (updated )
Severity
6.7
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.

First published (updated )
Severity
6.7
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.

First published (updated )
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory corruption when non-secure loader rewrites page tables before secure memory initialization.

First published (updated )
Severity
6.6
AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L

Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.

First published (updated )
Severity
8.8
AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Privilege escalation due to weak configuration while temporary file handling.

First published (updated )
Severity
8.8
AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Privilege escalation due to weak configuration during package extraction process.

First published (updated )
Severity
6.9
AV:P/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Memory corruption while processing a crafted ELF file in the Primary Bootloader.

First published (updated )
Severity
8.8
AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Exposed dangerous function lead to privilege escalation via gRPC server.

First published (updated )
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper authorization leads to Remote Code Execution via SocketIO interface.

First published (updated )
Severity
7.4
AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Transient DOS while parsing frame during channel usage.

First published (updated )
Severity
7.8
Integer Overflow
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory Corruption when validating large data buffers from external sources using addition to check buffer length.

First published (updated )
Severity
7.3
AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

Information Disclosure when a pointer is reused after being deallocated.

First published (updated )
Severity
8.8
AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Memory Corruption when copying unverified data from an external source exceeds the allocated buffer size.

First published (updated )
Severity
7.9
AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H

Transient DOS when processing unverified data from a neighboring system causes out of bound memory access.

First published (updated )
Severity
7.4
AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation.

First published (updated )
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory corruption when processing escape handling flow with insufficient user buffer sizes.

First published (updated )
Severity
7.8
Race Condition
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying.

First published (updated )
Severity
7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Transient DOS when processing authentication frames with invalid FILS information element header lengths.

First published (updated )
Severity
7.8
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Memory corruption while processing rear sensor IOCTL calls.

First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203