Zinuo Han

A memory corruption issue exists while processing commands from the A2dp sink command queue.

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Memory corruption occurs while processing data packets in diag received from Unix clients. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to an out-of-bounds write vulnerability while decoding hcr of libsavsac.so. This allows a local attacker to execute arbitrary code.

The issue is related to an Improper Input Validation vulnerability in the text parsing implementation. This allows local attackers to write out-of-bounds memory.

The issue is an out-of-bounds write vulnerability that occurs while releasing memory in libsavsac.so. This allows a local attacker to execute arbitrary code.

The issue is an out-of-bounds write vulnerability that occurs while parsing remaining codewords in libsavsac.so. This allows a local attacker to execute arbitrary code.

The issue is related to an Out-of-bound Write vulnerability in the chunk parsing implementation. This allows local attackers to execute arbitrary code.

The issue is related to a transient Denial of Service (DOS) in WLAN Host and Firmware. This occurs when a large number of open authentication frames are sent with an invalid transaction sequence number. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

The issue involves memory corruption that occurs when parsing an invalid mp2 clip in a video.

The issue is related to memory corruption in the VR Service when sending data using the Fast Message Queue (FMQ).

The issue is related to a Transient Denial of Service (DOS) in the Bluetooth HOST. It occurs when passing a descriptor to validate a blacklisted Bluetooth keyboard. There is no information provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.

The issue allows local attackers to access the UWB chipset Identifier due to an Exposure of Sensitive Information vulnerability in the `getChipIds` function of the UwbAospAdapterService. This could potentially expose sensitive information.

The issue is related to memory corruption in FM Host due to a buffer copy operation without checking the size of the input. This can lead to potential security risks.

The issue involves memory corruption in the Bluetooth HOST when processing the `AVRC PDU GET PLAYER APP VALUE TEXT` AVRCP response. This suggests a problem with how Bluetooth handles certain responses, potentially leading to memory corruption.

A information disclosure issue exists in the Android media framework.

A remote code execution issue in the Android media framework, specifically in the libvorbis library, is related to inadequate access control. This allows a remote attacker to execute arbitrary code.

The issue is related to insufficient access control in the Android operating system, which can be exploited by a remote attacker to execute arbitrary code.

The issue is related to a remote code execution vulnerability in the Android media framework. It is associated with insufficient access control in the Android operating system. Exploitation of this issue may allow a remote attacker to execute arbitrary code.

A remote code execution issue in the Android media framework's libavc library is related to inadequate access control. This allows a remote attacker to execute arbitrary code.

The issue is related to a remote code execution vulnerability in the Android media framework, specifically in the libstagefright library. This vulnerability is associated with inadequate access control. It allows a remote attacker to execute arbitrary code.