Memory corruption while playing audio file having large-sized input buffer

Memory corruption while processing Codec2 during v13k decoder pitch synthesis

Memory corruption while reading a value from a buffer controlled by the Guest Virtual Machine

Cryptographic issue may occur while encrypting license data

Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication

Integer Overflow or Wraparound in Display

Use After Free in SCE-Mink

Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker

Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call

Information disclosure may occur while decoding the RTP packet with invalid header extension from network

Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards

Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE

Untrusted Pointer Dereference in Graphics

Integer Overflow or Wraparound in Data Network Stack & Connectivity

Use After Free in Automotive GPU

Stack-based Buffer Overflow in Camera Driver

Improper Access Control for Register Interface in SCE-Mink

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Use After Free in Graphics

Exposed Dangerous Method or Function in HLOS

Integer Overflow or Wraparound in Automotive

Integer Overflow or Wraparound in Automotive

Memory corruption when accessing resources in kernel driver

Memory corruption while processing identity credential operations in the trusted application

Memory corruption while processing a secure logging command in the trusted application

Memory corruption while handling IOCTL calls to set mode

Memory corruption while copying packets received from unix clients

Memory corruption while processing large input data from a remote source via a communication interface

Memory corruption when triggering a subsystem crash with an out-of-range identifier

Memory corruption while processing client message during device management

Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions

Memory corruption while processing request sent from GVM

Memory corruption while performing encryption and decryption commands

Memory corruption while processing control commands in the virtual memory management interface

Memory corruption while handling repeated memory unmap requests from guest VM

Memory corruption while processing data sent by FE driver

Memory corruption while processing message in guest VM

memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency

Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously

Memory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently

Memory corruption while copying the result to the transmission queue which is shared between the virtual machine and the host

Memory corruption while copying the result to the transmission queue in EMAC

Memory corruption while processing a message, when the buffer is controlled by a Guest VM, the value can be changed continuously

Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur

Memory corruption while triggering commands in the PlayReady Trusted application

Memory corruption while reading secure file

Memory corruption while processing message content in eAVB

Memory corruption while transmitting packet mapping information with invalid header payload size