Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Decon Digital Decon WP SMS plugin <=Â 1.1 versions.
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest themes Everest News theme <=Â 1.1.0 versions.
Memory corruption in Trusted Execution Environment while calling service API with invalid address.
Memory corruption due to untrusted pointer dereference in automotive during system call.
Information disclosure in Bluetooth when an GATT packet is received due to improper input validation.
Memory corruption in RIL while trying to send apdu packet.
Memory corruption in WLAN while running doDriverCmd for an unspecific command.
Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length.
Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.
Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use.