Slava Makkaveev

CVE / CPR-ID

Title

Disclosure Date

Xiaomi Trusted Execution Environment | Classic Buffer Overflow

Sony OMX audio decoder | Classic Buffer Overflow

Unisoc radio modem | Integer Underflow

Qualcomm OMX audio decoder | Classic Buffer Overflow

MediaTek OMX audio decoder | Improper restriction of operations within the bounds of a memory buffer

MediaTek OMX audio decoder | Improper input validation

MediaTek Audio Aurisys HAL | Improper Input Validation

Mediatek Audio DSP | Heap-based Buffer Overflow

Mediatek Audio DSP | Heap-based Buffer Overflow

Mediatek Audio DSP | Heap-based Buffer Overflow

Amazon Kindle e-reader | Improper Privilege Management

Amazon Kindle e-reader | Integer Overflow leading to Heap-based Buffer Overflow

Qualcomm Data Modem | Buffer Overflow

Qualcomm DSP | Improper Authorization

Qualcomm DSP | Integer Underflow

Qualcomm DSP (ComputerVision) | Buffer Overflow

Qualcomm DSP (ComputerVision) | Untrusted Pointer Dereference

Qualcomm DSP (Video) | Improper Input Validation

Qualcomm DSP (Video) | Untrusted Pointer Dereference

Qualcomm HLOS (Secure Key Storage Trustlet) | Buffer Over-Read

Samsung Android devices (Secure Storage Trustlet) | Integer Underflow

LG Android devices (Discretix Digital Content Protection Trustlet) | Buffer Over-Read

LG Android devices | Potential Phishing Flow in OMACP

Samsung Android devices | Potential Phishing Flow in OMACP

Xiaomi Android devices | Man-In-The-Middle attack leads to RCE

Xiaomi Android devices | Man-In-The-Disk attack leads to LPE

LG Android devices | Man-In-The-Middle attack due to path-traversal vulnerability leads to RCE

LG Android devices | Man-In-The-Disk attack leads to LPE

LG Android devices | Man-In-The-Disk attack leads to LPE

Android devices | Man-In-The-Disk attack leads to DoS

Android devices | Man-In-The-Disk attack leads to DoS

Vulnerabilities #: 31