Incorrect Authorization in Graphics

Incorrect Authorization in Graphics Windows

Integer Overflow or Wraparound in Graphics

Improper Validation of Array Index in Multi-Mode Call Processor

Integer Overflow or Wraparound in GPS

Buffer Over-read in Data Network Stack & Connectivity

Buffer Over-read in Data Network Stack & Connectivity

Buffer Over-read in Data Network Stack & Connectivity

Buffer Over-read in Multi Mode Call Processor

NULL Pointer Dereference in SPS Applications

Use After Free in Automotive Audio

Buffer Copy Without Checking Size of Input in HLOS

Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size

Insecure Security Identifier Mechanism in Multi-Mode Call Processor

Reachable Assertion in WLAN Firmware

Improper Input Validation in Modem

Reachable Assertion in Modem

Loop with Unreachable Exit Condition (`Infinite Loop`) in Multi Mode Call Processor

Transient DOS in Multi-Mode Call Processor while processing UE policy container

Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage

Transient DOS in Modem while triggering a camping on an 5G cell

The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race…

Use After Free in Video

Improper Validation of Array Index in Camera_Linux

Use After Free in Computer Vision

Exposure of Private Personal Information to an Unauthorized Actor in Data Modem

Reachable Assertion in FW

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver

Information disclosure in WLAN HAL when reception status handler is called