Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage

Out-of-bounds Write in Camera Driver

Buffer Copy Without Checking Size of Input in Camera Driver

Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS

Memory corruption while processing multiple IOCTL calls from HLOS to DSP

Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service

Memory corruption while unmapping the fastrpc map when two threads can free the same map in concurrent scenario

Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playback and record

Buffer Over-read in WLAN Firmware

Reachable Assertion in BT Controller

Transient DOS during hypervisor virtual I/O operation in a virtual machine

Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling…

Buffer Over-read in Automotive Software platform based on QNX

Information disclosure while processing a packet at EAVB BE side with invalid header length

There may be information disclosure during memory re-allocation in TZ Secure OS

Information disclosure while deriving keys for a session for any Widevine use case

Buffer Over-read in Automotive OS Platform

Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus

Transient DOS while loading the TA ELF file

transient DOS when setting up a fence callback to free a KGSL memory entry object during DMA

Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size

Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command

Transient DOS while processing channel information for speaker protection v2 module in ADSP

Transient DOS in Audio when invoking callback function of ASM driver

Out-of-bounds Write in Camera Driver

Out-of-bounds Write in Camera Driver

Out-of-bounds Write in Camera Driver

Out-of-bounds Write in Camera Driver

Information disclosure may be there when a guest VM is connected

Permissions, Privileges, and Access Controls issue in Automotive OS Platform