Integer Overflow or Wraparound in Graphics

Use After Free in Graphics

Stack-based Buffer Overflow in WLAN Firmware

Missing Authentication for Critical Function in Boot

Use After Free in DSP Service

Use After Free in Graphics

NULL Pointer Dereference in SPS Applications

Memory Corruption when accessing trusted execution environment without proper privilege check

Memory corruption occurs when a secure application is launched on a device with insufficient memory

Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations

Memory corruption while passing pages to DSP with an unaligned starting address

Memory corruption while processing a secure logging command in the trusted application

Memory corruption while allocating buffers in DSP service

Memory corruption due to global buffer overflow when a test command uses an invalid payload type

Improper Validation of Syntactic Correctness of Input in Automotive Linux OS

Insecure Security Identifier Mechanism in Multi-Mode Call Processor

Buffer Over-read in WLAN Firmware

Missing Authentication for Critical Function in HLOS

Out-of-bounds Write in Camera Driver

Memory corruption while processing shared command buffer packet between camera userspace and kernel

Information disclosure while exposing internal TA-to-TA communication APIs to HLOS

Exposure of Private Personal Information to an Unauthorized Actor in Data Modem

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver

Memory corruption while processing a config call from userspace

Information disclosure while sending implicit broadcast containing APP launch information

Out-of-bounds Write in Camera Driver

Out-of-bounds Write in Camera Driver

Out-of-bounds Write in Camera Driver