Reusing a Nonce, Key Pair in Encryption in Automotive Platform

Buffer Over-read in Data Network Stack & Connectivity

Buffer Over-read in Data Network Stack & Connectivity

Buffer Over-read in Data Network Stack & Connectivity

Buffer Over-read in Data Network Stack & Connectivity

Information disclosure may occur due to improper permission and access controls to Video Analytics engine

Use After Free in DSP Service

Use After Free in Computer Vision

Use After Free in Computer Vision

Stack-based Buffer Overflow in Camera Driver

Use After Free in Graphics

Exposed Dangerous Method or Function in HLOS

Double Free in Graphics

Buffer Copy Without Checking Size of Input in DSP Service

Buffer Copy without Checking Size of Input in DSP Service

Use of Uninitialized Variable in HLOS

Buffer Copy Without Checking Size of Input in Core Services

Out-of-bounds Write in Windows Compute

Use After Free in DSP Service

Buffer Over-read in BT Controller

Improper Access Control Applied to Mirrored or Aliased Memory Regions in Hypervisor

Use After Free in DSP Service

Untrusted Pointer Dereference in DSP Service

Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer

Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads

Memory corruption in display driver while detaching a device

Memory corruption may occur during the synchronization of the camera`s frame processing pipeline

Memory corruption while handling multuple IOCTL calls from userspace for remote invocation

Buffer Over-read in WLAN Firmware

Buffer Over-read in WLAN HAL

Buffer Over-read in WLAN HAL

Transient DOS while parsing per STA profile in ML IE

Transient DOS may occur while parsing SSID in action frames

Transient DOS may occur while parsing EHT operation IE or EHT capability IE

Buffer Over-read in WLAN Firmware

Buffer Over-read in WLAN Firmware

Use After Free in Computer Vision

Improper Validation of Syntactic Correctness of Input in Display

Improper Validation of Syntactic Correctness of Input in Kernel

Missing Cryptographic Step in Data Modem

Cryptographic issues while generating an asymmetric key pair for RKP use cases

Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

Out-of-bounds Write in Camera Driver

Out-of-bounds Write in Camera Driver

Use After Free in Camera Driver

Use After Free in Camera Driver

Buffer Copy Without Checking Size of Input in Camera Driver

Memory corruption while processing multiple IOCTL calls from HLOS to DSP

Exposure of Private Personal Information to an Unauthorized Actor in Data Modem