cologne_firmware vulnerabilities

CVEs whose affected-version data names the cologne_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

cologne_firmware vulnerabilities

Memory corruption while processing service requests.

Memory Corruption when executing system service routines due to improper handling of user input buffers.

Memory corruption when processing draw objects of incorrect type during graphics command list execution.

Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.

Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.

Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.

Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.

Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.

Memory corruption when processing decode statistics due to insufficient validation of offset against structure size.

Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.

Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.

Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations.

Memory corruption while processing rear sensor IOCTL calls.

Memory Corruption when copying large input data exceeds normal allocation limits.

Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation.

Transient DOS when processing authentication frames with invalid FILS information element header lengths.

Transient DOS when processing unverified data from a neighboring system causes out of bound memory access.

Memory Corruption when validating large data buffers from external sources using addition to check buffer length.

Information Disclosure when a pointer is reused after being deallocated.

Memory Corruption when copying unverified data from an external source exceeds the allocated buffer size.

Transient DOS while parsing frame during channel usage.

Memory corruption when processing escape handling flow with insufficient user buffer sizes.

Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.

Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.

Transient DOS when processing target power rate tables during channel configuration.

Memory corruption while preprocessing IOCTL request in JPEG driver.

Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.

Memory Corruption when multiple threads concurrently access and modify shared resources.

Memory corruption while processing a video session to set video parameters.