303 matches found
CVE-2023-21652
Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use...
Stack overflow
Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use...
Authentication flaw
Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key...
CVE-2023-21652 Key Management Errors in HLOS
Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use...
CVE-2023-21652
CVE-2023-21652 describes a cryptographic issue in HLOS where derived keys used to encrypt/decrypt information remain on the stack after use. The vulnerability is noted across multiple sources (e.g., Red Hat, NVD, PRION/Vuln enrichment) with the CVSS v3.1 base metrics indicating HIGH impact for co...
CVE-2023-21652 Key Management Errors in HLOS
Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use...
CVE-2023-21650 Improper Validation of Array Index in GPS HLOS Driver
Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length...
CVE-2023-21650
CVE-2023-21650 describes memory corruption in the GPS HLOS Driver triggered when injectFdclData processes data with an invalid length. Multiple sources corroborate a Qualcomm GPS HLOS component impact with this CVE; Red Hat and CVE listings align with a GPS driver issue. The Android Pixel bulleti...
CVE-2023-21626
CVE-2023-21626 describes a cryptographic issue in HLOS caused by improper authentication during key velocity checks when multiple keys are used. Connected sources indicate the vulnerability affects Qualcomm closed‑source components in Android’s HLOS, with a high impact on confidentiality and inte...
CVE-2023-21626 Improper Authentication in HLOS.
Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key...
CVE-2023-21626 Improper Authentication in HLOS.
Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key...
CVE-2022-40507
Memory corruption due to double free in Core while mapping HLOS address to the list...
CVE-2022-33307
Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed...
Double free
Memory corruption due to double free in Core while mapping HLOS address to the list...
Double free
Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed...
CVE-2022-40507 Double free in Core
Memory corruption due to double free in Core while mapping HLOS address to the list...
CVE-2022-40507
CVE-2022-40507 describes memory corruption due to a double free in Core when mapping an HLOS address to the list, affecting Qualcomm closed‑source components. The issue has local attack vector with low privileges and no user interaction, with confidentiality, integrity, and availability impacts m...
CVE-2022-40507 Double free in Core
Memory corruption due to double free in Core while mapping HLOS address to the list...