Incorrect Authorization in Graphics

Incorrect Authorization in Graphics Windows

Integer Overflow or Wraparound in Graphics

Use After Free in SCE-Mink

Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set

Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources

Buffer Over-read in Multi Mode Call Processor

Information disclosure may occur due to improper permission and access controls to Video Analytics engine

Use After Free in DSP Service

Use After Free in Automotive GPU

Use After Free in Automotive Audio

Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers

Memory corruption while processing a secure logging command in the trusted application

Memory corruption while loading an invalid firmware in boot loader

Memory corruption while processing a malformed license file during reboot

Memory corruption due to global buffer overflow when a test command uses an invalid payload type

Memory corruption while performing private key encryption in trusted application

Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake

Memory corruption while handling client exceptions, allowing unauthorized channel access

Memory corruption when programming registers through virtual CDM

Memory corruption while processing data packets in diag received from Unix clients

Memory corruption while processing manipulated payload in video firmware

Memory corruption while triggering commands in the PlayReady Trusted application

Memory corruption while reading secure file

Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation

Memory corruption while calling the NPU driver APIs concurrently

Memory corruption may occur while validating ports and channels in Audio driver

Memory corruption while processing IOCTL from user space to handle GPU AHB bus error

Memory corruption can occur in the camera when an invalid CID is used

Memory corruption while validating number of devices in Camera kernel

Memory corruption while processing API calls to NPU with invalid input

Memory corruption when invalid input is passed to invoke GPU Headroom API call

Memory corruption while processing GPU commands

Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node

Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Computer Vision

Untrusted Pointer Dereference in Computer Vision

Information disclosure while creating MQ channels

Buffer Over-read in WLAN Firmware

Insecure Security Identifier Mechanism in Multi-Mode Call Processor

Buffer Over-read in WLAN Firmware

Transient DOS while processing CCCH data when NW sends data with invalid length

Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE

Transient DOS may occur while parsing EHT operation IE or EHT capability IE

Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem

Buffer Over-read in Multi Mode Call Processor

Buffer Over-read in WLAN Firmware

Missing Authentication for Critical Function in HLOS