Use After Free in DSP Service

Memory corruption while playing audio file having large-sized input buffer

Memory corruption while processing Codec2 during v13k decoder pitch synthesis

Memory corruption while parsing qcp clip with invalid chunk data size

Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size

Memory corruption in video while parsing invalid mp2 clip

Memory corruption while reading a value from a buffer controlled by the Guest Virtual Machine

Memory corruption in Hypervisor when platform information mentioned is not aligned

Memory corruption in WLAN HOST while processing the WLAN scan descriptor list

Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information

Reusing a Nonce, Key Pair in Encryption in Automotive Platform

Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker

Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call

Information disclosure may occur while decoding the RTP packet with invalid header extension from network

Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards

Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE

Weak configuration in Automotive while VM is processing a listener request from TEE

Untrusted Pointer Dereference in Graphics

Untrusted Pointer Dereference in Automotive Security

Buffer Copy Without Checking Size of Input in Biometrics

Integer Overflow or Wraparound in Data Network Stack & Connectivity

Use After Free in Automotive GPU

Improper Access Control for Register Interface in SCE-Mink

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Use After Free in Graphics

Exposed Dangerous Method or Function in HLOS

Integer Overflow or Wraparound in Automotive

Integer Overflow or Wraparound in Automotive

Use of Uninitialized Variable in HLOS

Out-of-bounds Write in HLOS

Use After Free in Automotive Linux OS

Integer Overflow or Wraparound in Automotive Platform

Improper Validation of Array Index in Automotive Software platform based on QNX

Stack-based Buffer Overflow in Automotive Software platform based on QNX

Out-of-bounds Write in Windows Compute

Stack-based Buffer Overflow in Automotive Software platform based on QNX

Use After Free in Automotive Software platform based on QNX

Improper Input Validation in Automotive Software platform based on QNX

Use After Free in Automotive Software platform based on QNX

Use After Free in Camera Driver

Improper Access Control Applied to Mirrored or Aliased Memory Regions in Hypervisor

Use After Free in BTHOST

Use After Free in NPU

Memory corruption while copying the result to the transmission queue which is shared between the virtual machine and the host

Memory corruption while copying the result to the transmission queue in EMAC

Memory corruption while reading the FW response from the shared queue

Memory corruption while processing a message, when the buffer is controlled by a Guest VM, the value can be changed continuously

Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur

Memory corruption while triggering commands in the PlayReady Trusted application