Know your exposure.
Stay ahead of threats.

Insufficient validation of length fields in the GNSS firmware loader can result in kernel?memory corruption.

Integer overflow in NPU driver parameter processing due to insufficient bounds checking.

Incorrect authorization in Samsung framework services due to missing permission checks

A double free vulnerability in NPU driver due to improper pointer management (941)

A double free vulnerability in NPU driver due to improper pointer management (940)

In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a denial of service condition.

In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading to denial of service or privilege escalation.

In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service.

In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption.

Improper handling of messages before AS security activation can cause unexpected behavior

Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions

In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service

Out of bound access in PPC due to race condition in global variable access

A memory corruption vulnerability caused by improper validation of messages

Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.

In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial?of?service condition.

In the NAS message handler, improper validation of the length field in NAS message causes memory corruption

In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability

In the baseband, memory corruption during NAS packet processing can cause a denial of service.

In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation.

In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial?of?service condition.

In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service.

An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through the SIP message flow.

Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.

In G4KLX DStarGateway and F4FXL DStarGateway before 7b75de6, dstarCallsignToAPRS in APRSUtils.cpp has an integer underflow via an empty RS-MS1A sender field.