Zinuo Han

**Name of the Vulnerable Software and Affected Versions** versions prior to 2025-21474 **Description** A memory corruption issue exists while processing commands from the A2dp sink command queue. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Memory corruption occurs while processing data packets in diag received from Unix clients. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** libsavsac.so versions prior to SMR Apr-2024 Release 1 **Description** The issue is related to an out-of-bounds write vulnerability while decoding hcr of libsavsac.so. This allows a local attacker to execute arbitrary code. **Recommendations** For versions prior to SMR Apr-2024 Release 1, update to SMR Apr-2024 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to libsavsac.so to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** libsdffextractor versions prior to SMR Apr-2024 Release 1 **Description** The issue is related to an Improper Input Validation vulnerability in the text parsing implementation. This allows local attackers to write out-of-bounds memory. **Recommendations** For versions prior to SMR Apr-2024 Release 1, update to SMR Apr-2024 Release 1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** libsavsac.so versions prior to SMR Apr-2024 Release 1 **Description** The issue is an out-of-bounds write vulnerability that occurs while releasing memory in libsavsac.so. This allows a local attacker to execute arbitrary code. **Recommendations** For versions prior to SMR Apr-2024 Release 1, update to SMR Apr-2024 Release 1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** libsavsac.so versions prior to SMR Apr-2024 Release 1 **Description** The issue is an out-of-bounds write vulnerability that occurs while parsing remaining codewords in libsavsac.so. This allows a local attacker to execute arbitrary code. **Recommendations** For versions prior to SMR Apr-2024 Release 1, update to SMR Apr-2024 Release 1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** libsdffextractor versions prior to SMR Apr-2023 Release 1 **Description** The issue is related to an Out-of-bound Write vulnerability in the chunk parsing implementation. This allows local attackers to execute arbitrary code. **Recommendations** For versions prior to SMR Apr-2023 Release 1, update to SMR Apr-2023 Release 1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** WLAN Host and Firmware (affected versions not specified) **Description** The issue is related to a transient Denial of Service (DOS) in WLAN Host and Firmware. This occurs when a large number of open authentication frames are sent with an invalid transaction sequence number. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** No specific software or versions mentioned. **Description** The issue involves memory corruption that occurs when parsing an invalid mp2 clip in a video. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** VR Service (affected versions not specified) **Description** The issue is related to memory corruption in the VR Service when sending data using the Fast Message Queue (FMQ). **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Bluetooth HOST (affected versions not specified) **Description** The issue is related to a Transient Denial of Service (DOS) in the Bluetooth HOST. It occurs when passing a descriptor to validate a blacklisted Bluetooth keyboard. There is no information provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** UwbAospAdapterService versions prior to SMR Jul-2023 Release 1 **Description** The issue allows local attackers to access the UWB chipset Identifier due to an Exposure of Sensitive Information vulnerability in the `getChipIds` function of the UwbAospAdapterService. This could potentially expose sensitive information. **Recommendations** For versions prior to SMR Jul-2023 Release 1, consider restricting access to the `getChipIds` function in the UwbAospAdapterService as a temporary workaround until a patch is available.

**Name of the Vulnerable Software and Affected Versions** FM Host (affected versions not specified) **Description** The issue is related to memory corruption in FM Host due to a buffer copy operation without checking the size of the input. This can lead to potential security risks. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** No specific software or versions are mentioned in the provided descriptions. **Description** The issue involves memory corruption in the Bluetooth HOST when processing the `AVRC PDU GET PLAYER APP VALUE TEXT` AVRCP response. This suggests a problem with how Bluetooth handles certain responses, potentially leading to memory corruption. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Android versions 7.0 through 8.0 **Description** A information disclosure issue exists in the Android media framework. **Recommendations** For Android versions 7.0 through 8.0, update to a version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Android versions 4.4.4 through 8.0 **Description** A remote code execution issue in the Android media framework, specifically in the libvorbis library, is related to inadequate access control. This allows a remote attacker to execute arbitrary code. **Recommendations** For Android versions 4.4.4 through 8.0, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Android versions 7.1.1 through 7.1.2 **Description** The issue is related to insufficient access control in the Android operating system, which can be exploited by a remote attacker to execute arbitrary code. **Recommendations** For versions 7.1.1 and 7.1.2, update to a newer version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Android versions 7.0, 7.1.1, 7.1.2 **Description** The issue is related to a remote code execution vulnerability in the Android media framework. It is associated with insufficient access control in the Android operating system. Exploitation of this issue may allow a remote attacker to execute arbitrary code. **Recommendations** For Android versions 7.0, 7.1.1, and 7.1.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Android versions 6.0 through 8.0 **Description** A remote code execution issue in the Android media framework's libavc library is related to inadequate access control. This allows a remote attacker to execute arbitrary code. **Recommendations** For Android versions 6.0 through 8.0, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Android versions 6.0 through 7.1.2 **Description** The issue is related to a remote code execution vulnerability in the Android media framework, specifically in the libstagefright library. This vulnerability is associated with inadequate access control. It allows a remote attacker to execute arbitrary code. **Recommendations** For Android versions 6.0 through 7.1.2, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.