Out-of-bounds Write in Camera Driver

Out-of-bounds Write in Camera Driver

Memory corruption while accessing a synchronization object during concurrent operations

Memory corruption while parsing clock configuration data for a specific hardware type

Memory corruption while processing shared command buffer packet between camera userspace and kernel

Information disclosure while exposing internal TA-to-TA communication APIs to HLOS

Memory corruption while processing IOCTL command to handle buffers associated with a session

Exposure of Private Personal Information to an Unauthorized Actor in Data Modem

Transient DOS when processing a received frame with an excessively large authentication information element

Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver

Memory corruption while handling sensor utility operations

Memory corruption while processing a config call from userspace

Information disclosure while running video usecase having rogue firmware

Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus