Use After Free in Graphics

Memory corruption while processing specific files in Powerline Communication Firmware

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions

Integer Overflow or Wraparound in GPS

Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker

Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call

Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources

Missing Authentication for Critical Function in Data Modem

Use After Free in Graphics

NULL Pointer Dereference in SPS Applications

Improper Access Control for Register Interface in SCE-Mink

Use After Free in Automotive Audio

Memory corruption occurs when a secure application is launched on a device with insufficient memory

Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations

Memory corruption while passing pages to DSP with an unaligned starting address

Memory corruption while loading an invalid firmware in boot loader

Memory corruption while allocating buffers in DSP service

Memory corruption while handling invalid inputs in application info setup

Memory corruption while handling client exceptions, allowing unauthorized channel access

Memory corruption while processing commands from A2dp sink command queue

Memory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently

Memory corruption during dynamic process creation call when client is only passing address and length of shell binary

Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC

Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads

Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is exposed as shared memory

Memory corruption while handling file descriptor during listener registration/de-registration

Memory corruption during GNSS HAL process initialization

Memory corruption while processing GPU page table switch

Memory corruption while processing GPU commands

Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node

Memory corruption while handling session errors from firmware

Memory corruption when kernel driver attempts to trigger hardware fences

Memory corruption when memory mapped in a VBO is not unmapped by the GPU SMMU

Memory corruption during session sign renewal request calls in HLOS

Memory corruption in Graphics Driver when destroying a context with KGSL_GPU_AUX_COMMAND_TIMELINE objects queued

Memory corruption when IPv6 prefix timer object`s lifetime expires which are created while Netmgr daemon gets an IPv6 address

Memory corruption while sending SMS from AP firmware

Memory Corruption in Audio while invoking IOCTLs calls from the user-space

Memory Corruption in camera while installing a fd for a particular DMA buffer

Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM

Memory corruption in Audio when SSR event is triggered after music playback is stopped

Memory corruption while processing audio effects

Memory corruption due to improper validation of array index in Audio

Memory corruption due to use after free in Core when multiple DCI clients register and deregister

Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host

Memory corruption in Linux android due to double free while calling unregister provider after register call

Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries

Memory corruption due to incorrect type conversion or cast in audio while using audio playback/capture when crafted address is sent from AGM IPC to AGM

Memory corruption due to use after free in Modem while modem initialization

Improper Validation of Syntactic Correctness of Input in Automotive Linux OS