Integer Overflow or Wraparound in GPS

Missing Authentication for Critical Function in Boot

Missing Authentication for Critical Function in Data Modem

Untrusted Pointer Dereference in Graphics

Use After Free in Automotive GPU

Stack-based Buffer Overflow in Camera Driver

Buffer Copy Without Checking Size of Input in Automotive Platform

Memory Corruption when adding user-supplied data without checking available buffer space

Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs

Memory Corruption when accessing trusted execution environment without proper privilege check

Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources

Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls

Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls

Memory Corruption when accessing buffers with invalid length during TA invocation

Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors

Insecure Security Identifier Mechanism in Multi-Mode Call Processor

Buffer Over-read in WLAN HAL

Buffer Over-read in WLAN Firmware

Buffer Over-read in WLAN Firmware

Buffer Over-read in BT Controller

Improper Validation of Syntactic Correctness of Input in Display

Improper Validation of Syntactic Correctness of Input in Display

Missing Authentication for Critical Function in HLOS