Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager

NULL Pointer Dereference in HLOS

Out-of-bounds Write in HLOS

Out-of-bounds Write in Windows Compute

Improper Access Control Applied to Mirrored or Aliased Memory Regions in Hypervisor

Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation

Memory corruption may occur while accessing a variable during extended back to back tests

Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace

Memory corruption while configuring a Hypervisor based input virtual device

Use After Free in DSP Services

Use After Free in DSP Services

Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released

Memory corruption while allocating memory in HGSL driver

Memory corruption while processing IOCTL call to set metainfo

Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization

Memory corruption while verifying the serialized header when the key pairs are generated

Memory corruption in HLOS while checking for the storage type

Memory corruption while processing buffer initialization, when trusted report for certain report types are generated

Memory corruption while processing a QMI request for allocating memory from a DHMS supported subsystem

Memory corruption while invoking IOCTLs calls in Automotive Multimedia

Memory corruption while invoking HGSL IOCTL context create

Memory corruption in Core when updating rollback version for TA and OTA feature is enabled

Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP

Memory corruption when resource manager sends the host kernel a reply message with multiple fragments

Memory corruption in wearables while processing data from AON

Memory corruption in Core while processing RX intent request

Memory corruption in HLOS while invoking IOCTL calls from user-space

Memory corruption in core services when Diag handler receives a command to configure event listeners

Memory corruption in DSP Service during a remote call from HLOS to DSP

Memory Corruption in HLOS while registering for key provisioning notify

Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application

Memory Corruption in Core while invoking a call to Access Control core library with hardware protected address range

Improper Access to the VM resource manager can lead to Memory Corruption

Transient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element

Improper Validation of Syntactic Correctness of Input in Display

Reusing a Nonce, Key Pair in Encryption in HLOS

Cryptographic issues while generating an asymmetric key pair for RKP use cases

Improper Input Validation in Trusted Execution Environment

Memory corruption while loading a VM from a signed VM image that is not coherent in the processor cache

Memory corruption while processing multiple IOCTL calls from HLOS to DSP

Transient DOS during hypervisor virtual I/O operation in a virtual machine