Integer Overflow or Wraparound in Graphics

Use After Free in Graphics

Use After Free in DSP Service

Use After Free in Automotive Audio

Buffer Copy Without Checking Size of Input in HLOS

Memory corruption while handling client exceptions, allowing unauthorized channel access

Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node

Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table

Improper Validation of Syntactic Correctness of Input in Automotive Linux OS

Buffer Over-read in WLAN Firmware

Transient DOS may occur while processing malformed length field in SSID IEs

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request

Missing Authentication for Critical Function in HLOS

Out-of-bounds Write in Camera Driver

Buffer Copy Without Checking Size of Input in Camera Driver