Integer Overflow or Wraparound in Graphics Linux

Use of Out-of-range Pointer Offset in Graphics

Stack-based Buffer Overflow in WLAN Host

Buffer Copy Without Checking Size of Input in Secure Processor

Improper Validation of Array Index in Secure Processor

Memory corruption in Hypervisor when platform information mentioned is not aligned

Reusing a Nonce, Key Pair in Encryption in Automotive Platform

Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager

Buffer Over-read in Multi Mode Call Processor

Use After Free in DSP_Services

Use After Free in DSP Service

Missing Authorization in Core

Out-of-bounds Write in DSP Service

Untrusted Pointer Dereference in Camera

Out-of-bounds Write in Video

Buffer Over-read in Windows Compute

Use After Free in Computer Vision

Use After Free in Computer Vision

Out-of-bounds Write in DSP Service

NULL Pointer Dereference in HLOS

Out-of-bounds Write in HLOS

Buffer Copy Without Checking Size of Input in Automotive Audio

Buffer Over-read in Camera

Buffer Over-read in Camera

Buffer Over-read in Camera

Buffer Over-read in Camera

Buffer Over-read in Camera

Heap-Based Buffer Overflow in Power Management IC

Buffer Over-read in WinBlast Driver

Stack-based Buffer Overflow in Camera Driver

Buffer Over-read in Camera

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Use After Free in Graphics

Improper Release of Memory Before Removing Last Reference in Graphics

Untrusted Pointer Dereference in Video

Memory Corruption when processing IOCTLs for JPEG data without verification

Memory corruption while routing GPR packets between user and root when handling large data packet

Memory corruption while copying packets received from unix clients

Memory corruption during video playback when video session open fails with time out error

Memory corruption while accessing a buffer during IOCTL processing

memory corruption while processing an image encoding completion event

Memory corruption while encoding the image data

Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake

Memory corruption while processing IOCTL command with larger buffer in Bluetooth Host

Memory corruption during the image encoding process

Memory corruption while processing event close when client process terminates abruptly

Memory corruption while processing the TESTPATTERNCONFIG escape path

Memory corruption while processing multiple simultaneous escape calls

Memory corruption while processing a private escape command in an event trigger