Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage

Memory corruption while processing shared command buffer packet between camera userspace and kernel

Out of Bounds write in Linux Camera

Memory corruption while handling buffer mapping operations in the cryptographic driver

Integer Underflow (Wrap or Wraparound) in WLAN Host

Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver

Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling…

Buffer Over-read in WLAN Host Communication

Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID

Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus

Transient DOS while loading the TA ELF file

Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request

Information disclosure in Kernel due to indirect branch misprediction