Memory corruption while playing audio file having large-sized input buffer

Memory corruption while processing Codec2 during v13k decoder pitch synthesis

Information Disclosure while parsing beacon frame in STA

Memory corruption while reading a value from a buffer controlled by the Guest Virtual Machine

Cryptographic issue may occur while encrypting license data

Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication

Integer Overflow or Wraparound in Display

Use After Free in SCE-Mink

Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call

Information disclosure may occur while decoding the RTP packet with invalid header extension from network

Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards

Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE

Untrusted Pointer Dereference in Graphics

Integer Overflow or Wraparound in Data Network Stack & Connectivity

Use After Free in Automotive GPU

Buffer Copy Without Checking Size of Input in Automotive Audio

Stack-based Buffer Overflow in Camera Driver

Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs

Memory Corruption while processing IOCTL calls when concurrent access to shared buffer occurs

Memory corruption while handling different IOCTL calls from the user-space simultaneously

Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers

Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input

Memory corruption while calculating offset from partition start point

Memory corruption when calculating oversized partition sizes without proper checks

Memory corruption when accessing resources in kernel driver

Memory corruption while processing identity credential operations in the trusted application

Memory corruption while handling IOCTL calls to set mode

Memory corruption while copying packets received from unix clients

Memory corruption while processing large input data from a remote source via a communication interface

Memory corruption when triggering a subsystem crash with an out-of-range identifier

Memory corruption while processing client message during device management

Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions

Memory corruption while processing request sent from GVM

Memory corruption while performing encryption and decryption commands

Memory corruption while processing control commands in the virtual memory management interface

Memory corruption while handling repeated memory unmap requests from guest VM

Memory corruption while processing data sent by FE driver

Memory corruption while processing message in guest VM

memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency

Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously

Memory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently

Memory corruption while copying the result to the transmission queue which is shared between the virtual machine and the host

Memory corruption while copying the result to the transmission queue in EMAC

Memory corruption while processing a message, when the buffer is controlled by a Guest VM, the value can be changed continuously

Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur

Memory corruption while processing message content in eAVB

Memory corruption while transmitting packet mapping information with invalid header payload size

Memory corruption while processing memory map or unmap IOCTL operations simultaneously

Memory corruption may occur due top improper access control in HAB process

Memory corruption while reading a type value from a buffer controlled by the Guest Virtual Machine