Incorrect Authorization in Graphics

Incorrect Authorization in Graphics Windows

Integer Overflow or Wraparound in Graphics

Use After Free in DSP Service

Integer Overflow or Wraparound in Graphics Linux

Use of Out-of-range Pointer Offset in Graphics

Use After Free in DSP Services

Memory corruption while selecting the PLMN from SOR failed list

Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs

Memory corruption while processing specific files in Powerline Communication Firmware

Memory corruption while parsing qcp clip with invalid chunk data size

Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size

Memory corruption in video while parsing invalid mp2 clip

Memory Corruption in Multi-mode Call Processor while processing bit mask API

Memory Corruption in Data Modem while making a MO call or MT VOLTE call

Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE

Memory corruption while handling payloads from remote ESL

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network

Buffer Copy Without Checking Size of Input in Secure Processor

Improper Validation of Array Index in Secure Processor

Memory corruption when decoding corrupted satellite data files with invalid signature offsets

Memory corruption while loading an ELF segment in TEE Kernel

Memory corruption in WLAN HOST while processing the WLAN scan descriptor list

Integer Overflow or Wraparound in Display

Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet

Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network

Information disclosure may occur while processing goodbye RTCP packet from network

Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards

Buffer Over-read in Multi Mode Call Processor

Missing Authentication for Critical Function in Data Modem

Missing Authorization in Core

Buffer Over-read in Windows Compute

Out-of-bounds Write in HLOS

NULL Pointer Dereference in SPS Applications

Buffer Copy Without Checking Size of Input in Automotive Audio

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver

Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing

Memory Corruption when retrieving output buffer with insufficient size validation

Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation

Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs

Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources

Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls

Memory Corruption when multiple threads simultaneously access a memory free API

Memory Corruption when processing IOCTLs for JPEG data without verification

Memory corruption while processing MFC channel configuration during music playback

Memory corruption during video playback when video session open fails with time out error