Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity

Memory corruption during management frame processing due to mismatch in T2LM info element

Memory corruption while parsing the ML IE due to invalid frame content

Memory corruption while playing audio file having large-sized input buffer

Memory corruption while processing Codec2 during v13k decoder pitch synthesis

Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE

Memory corruption while processing MBSSID beacon containing several subelement IE

Memory corruption while parsing qcp clip with invalid chunk data size

Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point

Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE

Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size

Information Disclosure while parsing beacon frame in STA

Memory corruption while reading a value from a buffer controlled by the Guest Virtual Machine

Buffer Copy Without Checking Size of Input in Boot

Integer Overflow or Wraparound in Display

Use After Free in SCE-Mink

Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager

Buffer Over-read in Data Network Stack & Connectivity

Information disclosure may occur while processing goodbye RTCP packet from network

Weak configuration in Automotive while VM is processing a listener request from TEE

Untrusted Pointer Dereference in Graphics

Use After Free in Graphics

Integer Overflow or Wraparound in Data Network Stack & Connectivity

NULL Pointer Dereference in HLOS

Stack-based Buffer Overflow in Camera Driver

Buffer Over-read in Graphics

Use After Free in Automotive Audio

Improper Access Control for Register Interface in SCE-Mink

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Out-of-bounds Write in Automotive

Improper Release of Memory Before Removing Last Reference in Graphics

Exposed Dangerous Method or Function in HLOS

Integer Overflow or Wraparound in Automotive

Integer Overflow or Wraparound in Automotive

Improper Validation of Array Index in Automotive Linux OS

Out-of-bounds Write in HLOS

Use After Free in HLOS

Incorrect Authorization in Boot

Integer Overflow or Wraparound in Audio

Use After Free in Automotive Linux OS

Buffer Copy Without Checking Size of Input in Core Services

Integer Overflow or Wraparound in Automotive Platform

Improper Validation of Array Index in Automotive Software platform based on QNX

Stack-based Buffer Overflow in Automotive Software platform based on QNX

Missing Authentication for Critical Function in SMSS

Exposed Dangerous Method or Function in Automotive Software platform based on QNX

Out-of-bounds Write in Windows Compute

Stack-based Buffer Overflow in Automotive Software platform based on QNX