Use After Free in DSP Services

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Computer Vision

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host

Buffer Over-read in Display

Return of Stack Variable Address in Buses

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host

Untrusted Pointer Dereference in Computer Vision

Use After Free in Graphics Linux

Use After Free in Automotive Telematics

Use After Free in Graphics Linux

Use of Uninitialized Variable in Automotive GPU

Use After Free in Graphics Linux

Use After Free in Graphics Linux

Use After Free in Graphics Linux

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive

Use After Free in Graphics

Integer Overflow or Wraparound in Graphics

Improper Restriction of Operations withing the Bounds of a Memory Buffer in DSP Services

Improper Access Control in Graphics Linux

Use After Free in Graphics Linux

Access of Uninitialized Pointer in SPS Applications

Integer Overflow or Wraparound in HLOS

Buffer Over-read in Trusted Execution Environment

Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size

Memory corruption in Core while processing RX intent request

Memory corruption in Audio while running invalid audio recording from ADSP

Memory corruption in HLOS while invoking IOCTL calls from user-space

Reachable Assertion in WLAN Firmware

Improper Input Validation in Modem

Reachable Assertion in Modem

Buffer Over-read in WLAN Host Communication

Buffer Over-read in WLAN Firmware

Buffer Copy Without Checking Size of Input in WLAN Host

Buffer Over-read in WLAN HOST

Buffer Over-read in WLAN Host Communication

Buffer Over-read in WLAN Firmware

Buffer Over-read in WLAN HOST

Loop with Unreachable Exit Condition (`Infinite Loop`) in Multi Mode Call Processor

Buffer Over-read in Video

Reachable Assertion in Data Modem

Incorrect Type Conversion or Cast in Multi-Mode Call Processor

Improper Input Validation in Multi-Mode Call Processor

Transient DOS in Bluetooth Host while rfc slot allocation

Exposed Dangerous Method or Function in HLOS

Improper Input Validation in Trusted Execution Environment

Time-of-check Time-of-use (TOCTOU) Race Condition in Display

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera