Integer Underflow (Wrap or Wraparound) in WLAN Host

Reachable Assertion in FW

Information disclosure while processing the hash segment in an MBN file

Information disclosure while reading data from an image using specified offset and size parameters

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver

Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling…

Buffer Over-read in Video

Information disclosure when Video engine escape input data is less than expected minimum size

Information disclosure while running video usecase having rogue firmware

Buffer Over-read in DSP Service

Buffer Over-read in Video

Transient DOS while processing IOCTL call for image encoding

Information disclosure while deriving keys for a session for any Widevine use case

Buffer Over-read in FM Host

Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus

Out-of-bounds Write in Camera Driver

Out-of-bounds Write in Camera Driver