CVE-2024-23356: Improper Restriction of Operations within the Bounds of a Memory Buffer

Memory corruption during session sign renewal request calls in HLOS...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets, which stems from the HLOS module containing a null pointer dereference vulnerability...

CVE-2024-21461 Double Free in HLOS

Memory corruption while performing finish HMAC operation when context is freed by keymaster...

CVE-2024-21461 Double Free in HLOS

Memory corruption while performing finish HMAC operation when context is freed by keymaster...

CVE-2023-43530

Memory corruption in HLOS while checking for the storage type...

CVE-2023-43528

Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size...

CVE-2023-43530 Integer Overflow or Wraparound in HLOS

Memory corruption in HLOS while checking for the storage type...

CVE-2023-43530 Integer Overflow or Wraparound in HLOS

Memory corruption in HLOS while checking for the storage type...

CVE-2023-43530

CVE-2023-43530 describes a memory corruption in HLOS during storage type checks, affecting Qualcomm chipsets. The production impact is described as memory corruption rather than exploitation details in the provided documents. The CVE is referenced across multiple feeds (NVD, Red Hat, NCSC, Androi...

CVE-2023-43528 Buffer Over-read in Audio

Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size...

CVE-2023-43528

CVE-2023-43528 concerns Qualcomm chipsets’ Audio components. Information disclosure occurs when the ADSP payload size returned to HLOS in response to an Audio Stream Manager matrix session is smaller than expected, caused by a mismatch in the ADSP payload size. The vulnerability impacts confident...

CVE-2023-43521 Use After Free in HLOS

Memory corruption when multiple listeners are being registered with the same file descriptor...

CVE-2023-43528: Buffer Over-read

Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size...

CVE-2023-43530: Integer Overflow or Wraparound

Memory corruption in HLOS while checking for the storage type...

CVE-2023-43515

Memory corruption in HLOS while running kernel address sanitizers syzkaller on tmecom with DEBUGFS enabled...

CVE-2023-43515

CVE-2023-43515 describes memory corruption in HLOS when running kernel address sanitizers (syzkaller) on tmecom with DEBUG_FS enabled. The issue targets the HLOS kernel path (syzkaller/DEBUG_FS context) and is linked to Qualcomm components (bootloader in the Qualcomm catalog). The connected docum...

CVE-2023-43515 Buffer copy without checking size of input (Classic buffer overflow) in HLOS

Memory corruption in HLOS while running kernel address sanitizers syzkaller on tmecom with DEBUGFS enabled...

CVE-2023-43515 Buffer copy without checking size of input (Classic buffer overflow) in HLOS

Memory corruption in HLOS while running kernel address sanitizers syzkaller on tmecom with DEBUGFS enabled...

CVE-2023-43515: Buffer Copy without Checking Size of Input

Memory corruption in HLOS while running kernel address sanitizers syzkaller on tmecom with DEBUGFS enabled...

CVE-2023-43513

Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element...