Information Disclosure while parsing beacon frame in STA

Memory corruption while reading a value from a buffer controlled by the Guest Virtual Machine

Reusing a Nonce, Key Pair in Encryption in Automotive Platform

Buffer Copy Without Checking Size of Input in Boot

Integer Overflow or Wraparound in Display

Use After Free in SCE-Mink

Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call

Information disclosure may occur while decoding the RTP packet with invalid header extension from network

Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards

Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE

Untrusted Pointer Dereference in Graphics

Integer Overflow or Wraparound in Data Network Stack & Connectivity

Use After Free in Automotive GPU

Buffer Copy Without Checking Size of Input in Automotive Audio

Stack-based Buffer Overflow in Camera Driver

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Use After Free in Graphics

Exposed Dangerous Method or Function in HLOS

Integer Overflow or Wraparound in Automotive

Integer Overflow or Wraparound in Automotive

Improper Validation of Array Index in Automotive Linux OS

Use of Uninitialized Variable in HLOS

Use After Free in Automotive Linux OS

Buffer Copy Without Checking Size of Input in Core Services

Integer Overflow or Wraparound in Automotive Platform

Improper Validation of Array Index in Automotive Software platform based on QNX

Stack-based Buffer Overflow in Automotive Software platform based on QNX

Missing Authentication for Critical Function in SMSS

Exposed Dangerous Method or Function in Automotive Software platform based on QNX

Out-of-bounds Write in Windows Compute

Stack-based Buffer Overflow in Automotive Software platform based on QNX

Use After Free in Automotive Software platform based on QNX

Improper Input Validation in Automotive Software platform based on QNX

Use After Free in Automotive Software platform based on QNX

Improper Access Control Applied to Mirrored or Aliased Memory Regions in Hypervisor

Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously

Memory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently

Memory corruption while copying the result to the transmission queue which is shared between the virtual machine and the host

Memory corruption while copying the result to the transmission queue in EMAC

Memory corruption while processing a message, when the buffer is controlled by a Guest VM, the value can be changed continuously

Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur

Memory corruption while processing message content in eAVB

Memory corruption while transmitting packet mapping information with invalid header payload size

Memory corruption while processing memory map or unmap IOCTL operations simultaneously

Memory corruption may occur due top improper access control in HAB process

Memory corruption while reading a type value from a buffer controlled by the Guest Virtual Machine

Memory corruption while processing input message passed from FE driver

Memory corruption in display driver while detaching a device