Stack-based Buffer Overflow in WLAN Firmware

Stack-based Buffer Overflow in WLAN Host

Integer Overflow or Wraparound in GPS

Missing Authentication for Critical Function in Data Modem

Use After Free in DSP Service

NULL Pointer Dereference in SPS Applications

Use After Free in Automotive GPU

Buffer Copy Without Checking Size of Input in Automotive Audio

Buffer Copy Without Checking Size of Input in Automotive Platform

Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs

Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources

Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls

Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls

Memory Corruption when accessing buffers with invalid length during TA invocation

Improper Validation of Syntactic Correctness of Input in Automotive Linux OS

Insecure Security Identifier Mechanism in Multi-Mode Call Processor

Buffer Over-read in WLAN Firmware

Buffer Over-read in WLAN HAL

Buffer Over-read in WLAN Firmware

Buffer Over-read in WLAN Firmware

Buffer Over-read in BT Controller

Improper Validation of Syntactic Correctness of Input in Display

Improper Validation of Syntactic Correctness of Input in Display

Improper Validation of Syntactic Correctness of Input in Kernel

Improper Validation of Syntactic Correctness of Input in Kernel

Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE

Missing Authentication for Critical Function in HLOS

Exposure of Private Personal Information to an Unauthorized Actor in Data Modem

Integer Underflow (Wrap or Wraparound) in WLAN Host

Transient DOS when an LTE RLC packet with invalid TB is received by UE

Transient DOS when processing a received frame with an excessively large authentication information element

Buffer Over-read in WLAN Host Communication