Integer Overflow or Wraparound in Graphics

Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call

Missing Authentication for Critical Function in Boot

Use After Free in DSP Service

Use After Free in Graphics

NULL Pointer Dereference in SPS Applications

Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources

Memory corruption when invalid input is passed to invoke GPU Headroom API call

Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node

Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP

Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size

Improper Validation of Syntactic Correctness of Input in Automotive Linux OS

The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race…

Exposure of Private Personal Information to an Unauthorized Actor in Data Modem

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver

Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data

Information disclosure in WLAN HAL when reception status handler is called