Out-of-bounds Write in Camera Driver

Out-of-bounds Write in Camera Driver

Memory corruption while accessing a synchronization object during concurrent operations

Memory corruption while parsing clock configuration data for a specific hardware type

Memory corruption while processing shared command buffer packet between camera userspace and kernel

Information disclosure while exposing internal TA-to-TA communication APIs to HLOS

Memory corruption while handling buffer mapping operations in the cryptographic driver

Memory corruption while processing IOCTL command to handle buffers associated with a session

Exposure of Private Personal Information to an Unauthorized Actor in Data Modem

Transient DOS when an LTE RLC packet with invalid TB is received by UE

Transient DOS when processing a received frame with an excessively large authentication information element

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver

Memory corruption while handling sensor utility operations

Memory corruption while processing a config call from userspace

Information disclosure while running video usecase having rogue firmware

Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus

There may be information disclosure during memory re-allocation in TZ Secure OS