Memory corruption while playing audio file having large-sized input buffer

Memory corruption while processing Codec2 during v13k decoder pitch synthesis

Memory corruption while parsing qcp clip with invalid chunk data size

Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point

Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE

Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size

Memory corruption in video while parsing invalid mp2 clip

Information Disclosure while parsing beacon frame in STA

Memory corruption while reading a value from a buffer controlled by the Guest Virtual Machine

Reusing a Nonce, Key Pair in Encryption in Automotive Platform

Buffer Copy Without Checking Size of Input in Boot

Integer Overflow or Wraparound in Display

Use After Free in SCE-Mink

Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker

Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call

Information disclosure may occur while decoding the RTP packet with invalid header extension from network

Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards

Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE

Untrusted Pointer Dereference in Graphics

Buffer Copy Without Checking Size of Input in Biometrics

Integer Overflow or Wraparound in Data Network Stack & Connectivity

Use After Free in Automotive GPU

Stack-based Buffer Overflow in Camera Driver

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Use After Free in Graphics

Exposed Dangerous Method or Function in HLOS

Integer Overflow or Wraparound in Automotive

Integer Overflow or Wraparound in Automotive

Improper Validation of Array Index in Automotive Linux OS

Use of Uninitialized Variable in HLOS

Out-of-bounds Write in HLOS

Use After Free in Automotive Linux OS

Buffer Copy Without Checking Size of Input in Core Services

Integer Overflow or Wraparound in Automotive Platform

Improper Validation of Array Index in Automotive Software platform based on QNX

Stack-based Buffer Overflow in Automotive Software platform based on QNX

Missing Authentication for Critical Function in SMSS

Exposed Dangerous Method or Function in Automotive Software platform based on QNX

Out-of-bounds Write in Windows Compute

Memory corruption while processing control commands in the virtual memory management interface

Memory corruption while handling invalid inputs in application info setup

Memory corruption while handling repeated memory unmap requests from guest VM

Memory corruption while processing data sent by FE driver

Memory corruption while processing message in guest VM

memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency

Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously

Memory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently

Memory corruption while copying the result to the transmission queue which is shared between the virtual machine and the host