Transient DOS while parsing the received TID-to-link mapping element of the TID-to-link mapping action frame

Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor report

Transient DOS while parsing fragments of MBSSID IE from beacon frame

Information disclosure while parsing sub-IE length during new IE generation

Information disclosure while handling SA query action frame

INformation disclosure while handling Multi-link IE in beacon frame

Transient DOS while parse fils IE with length equal to 1

Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame

Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL

Improper Validation of Syntactic Correctness of Input in Display

Improper Validation of Syntactic Correctness of Input in Display

Reusing a Nonce, Key Pair in Encryption in HLOS

Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain

Cryptographic issues while generating an asymmetric key pair for RKP use cases

Improper Input Validation in Trusted Execution Environment

Information disclosure in Audio while accessing AVCS services from ADSP payload

Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive Software platform based on QNX

Memory corruption may occur in keyboard virtual device due to guest VM interaction

Memory corruption may occur while processing message from frontend during allocation

Memory corruption while loading a VM from a signed VM image that is not coherent in the processor cache

Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage

Out-of-bounds Write in Camera Driver

Memory corruption while processing shared command buffer packet between camera userspace and kernel

Information disclosure while exposing internal TA-to-TA communication APIs to HLOS

Memory corruption while processing multiple IOCTL calls from HLOS to DSP

Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service

Memory corruption while unmapping the fastrpc map when two threads can free the same map in concurrent scenario

Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playback and record

Transient DOS when processing a received frame with an excessively large authentication information element

Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan

Transient DOS during hypervisor virtual I/O operation in a virtual machine

Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling…

Information disclosure while processing message from client with invalid payload

Information disclosure while processing a packet at EAVB BE side with invalid header length

There may be information disclosure during memory re-allocation in TZ Secure OS

Information disclosure while deriving keys for a session for any Widevine use case

Buffer Over-read in Automotive OS Platform

Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus

Transient DOS while loading the TA ELF file

transient DOS when setting up a fence callback to free a KGSL memory entry object during DMA

Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size

Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command

Transient DOS while processing channel information for speaker protection v2 module in ADSP

Transient DOS in Audio when invoking callback function of ASM driver

Out-of-bounds Write in Camera Driver

Out-of-bounds Write in Camera Driver

Out-of-bounds Write in Camera Driver

Out-of-bounds Write in Camera Driver

Information disclosure may be there when a guest VM is connected

Permissions, Privileges, and Access Controls issue in Automotive OS Platform