Use After Free in HLOS

Transient DOS during hypervisor virtual I/O operation in a virtual machine

Transient DOS while processing the CU information from RNR IE

Transient DOS while parsing BTM ML IE when per STA profile is not included

Transient DOS while parsing fragments of MBSSID IE from beacon frame

Buffer Over-read in Automotive Software platform based on QNX

Buffer Copy Without Checking Size of Input in Automotive Vehicle Networks

Buffer Over-read in Automotive OS Platform

Buffer Over-read in Automotive Autonomy

Buffer Over-read in Automotive Autonomy

transient DOS when setting up a fence callback to free a KGSL memory entry object during DMA

Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size

Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command

Transient DOS while processing channel information for speaker protection v2 module in ADSP

Transient DOS in Audio when invoking callback function of ASM driver

Information disclosure may be there when a guest VM is connected

Permissions, Privileges, and Access Controls issue in Automotive OS Platform