Out-of-bounds Write in Camera Driver

Buffer Copy Without Checking Size of Input in Camera Driver

Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS

Memory corruption while processing multiple IOCTL calls from HLOS to DSP

Buffer Copy Without Checking Size of Input in Audio

Memory corruption while processing IOCTL calls to add route entry in the HW

Memory corruption while invoking IOCTL map buffer request from userspace

Reachable Assertion in Modem

Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling…

Buffer Over-read in Core Services

Buffer Over-read in Video

Buffer Over-read in Video

Information disclosure while deriving keys for a session for any Widevine use case

Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus

Information Disclosure in WLAN Host when processing WMI event command

Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan

Out-of-bounds Write in Camera Driver

Out-of-bounds Write in Camera Driver

Out-of-bounds Write in Camera Driver