Stack-based Buffer Overflow in WLAN Firmware

Buffer Copy Without Checking Size of Input in Secure Processor

Improper Validation of Array Index in Secure Processor

Information disclosure may occur due to improper permission and access controls to Video Analytics engine

Use After Free in DSP Service

Use After Free in Graphics

Use After Free in Computer Vision

Use After Free in Computer Vision

Out-of-bounds Write in DSP Service

NULL Pointer Dereference in SPS Applications

Memory Corruption when using deprecated DMABUF IOCTL calls to manage video memory

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing

Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing

Memory Corruption when accessing trusted execution environment without proper privilege check

Memory corruption occurs when a secure application is launched on a device with insufficient memory

Memory corruption while processing a secure logging command in the trusted application

Memory corruption while loading an invalid firmware in boot loader

Memory corruption while handling invalid inputs in application info setup

Memory corruption while processing camera TPG write request

Information disclosure while creating MQ channels

Improper Validation of Syntactic Correctness of Input in Automotive Linux OS

Transient DOS may occur while parsing EHT operation IE or EHT capability IE

Memory corruption while assigning memory from the source DDR memory(HLOS) to ADSP

Use After Free in Computer Vision

Improper Validation of Syntactic Correctness of Input in Display

Stack-based Buffer Overflow in Display

Reusing a Nonce, Key Pair in Encryption in HLOS

Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain

Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

Out-of-bounds Write in Camera Driver

Stack-based Buffer Overflow in Windows Compute

Memory corruption while accessing a synchronization object during concurrent operations

Information disclosure while exposing internal TA-to-TA communication APIs to HLOS

Memory corruption while processing IOCTL command to handle buffers associated with a session

Exposure of Sensitive Information Through Metadata in Powerline Communication Firmware

Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling

Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan

Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR

Memory corruption while handling sensor utility operations

Memory corruption while processing a config call from userspace

Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling…

Out-of-bounds Write in Camera Driver

Out-of-bounds Write in Camera Driver

Out-of-bounds Write in Camera Driver