Information disclosure while parsing sub-IE length during new IE generation

Cryptographic issues while generating an asymmetric key pair for RKP use cases

Improper Input Validation in Trusted Execution Environment

Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive Software platform based on QNX

Memory corruption may occur in keyboard virtual device due to guest VM interaction

Memory corruption may occur while processing message from frontend during allocation

Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage

Information disclosure while exposing internal TA-to-TA communication APIs to HLOS

Memory corruption while processing multiple IOCTL calls from HLOS to DSP

Transient DOS during hypervisor virtual I/O operation in a virtual machine

Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling…

Information disclosure while processing message from client with invalid payload

Information disclosure while processing a packet at EAVB BE side with invalid header length

Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus

There may be information disclosure during memory re-allocation in TZ Secure OS

Information disclosure while deriving keys for a session for any Widevine use case

Buffer Over-read in Automotive OS Platform

Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus

Transient DOS while loading the TA ELF file

Information disclosure may be there when a guest VM is connected

Permissions, Privileges, and Access Controls issue in Automotive OS Platform