Memory corruption when decoding corrupted satellite data files with invalid signature offsets

Out-of-bounds Write in Video

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver

Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing

Memory Corruption when retrieving output buffer with insufficient size validation

Stack-based Buffer Overflow in WLAN Windows Host

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host

Memory corruption while allocating memory for graphics

Buffer Over-read in Qualcomm IPC

Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver

Memory corruption while handling IOCTL calls in JPEG Encoder driver

The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race…

Buffer Copy Without Checking Size of Input in Bluetooth HOST

Out-of-bounds Write in Core Services

Information disclosure in WLAN HAL when reception status handler is called