Memory corruption while reading a value from a buffer controlled by the Guest Virtual Machine

Buffer Copy Without Checking Size of Input in Boot

Integer Overflow or Wraparound in Display

Use After Free in SCE-Mink

Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker

Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE

Weak configuration in Automotive while VM is processing a listener request from TEE

Use After Free in Graphics

Integer Overflow or Wraparound in Data Network Stack & Connectivity

Buffer Copy Without Checking Size of Input in Automotive Platform

Buffer Over-read in Graphics

Improper Access Control for Register Interface in SCE-Mink

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Integer Overflow or Wraparound in Automotive

Integer Overflow or Wraparound in Automotive

Improper Validation of Array Index in Automotive Linux OS

Out-of-bounds Write in HLOS

Incorrect Authorization in Boot

Out-of-bounds Write in Audio

Integer Overflow or Wraparound in Automotive Platform

Improper Validation of Array Index in Automotive Software platform based on QNX

Stack-based Buffer Overflow in Automotive Software platform based on QNX

Missing Authentication for Critical Function in SMSS

Exposed Dangerous Method or Function in Automotive Software platform based on QNX

Stack-based Buffer Overflow in Automotive Software platform based on QNX

Use After Free in Automotive Software platform based on QNX

Improper Input Validation in Automotive Software platform based on QNX

Use After Free in Automotive Software platform based on QNX

Memory corruption while handling client exceptions, allowing unauthorized channel access

Memory corruption while processing data packets in diag received from Unix clients

Memory corruption while copying the result to the transmission queue which is shared between the virtual machine and the host

Memory corruption while copying the result to the transmission queue in EMAC

Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses

Memory corruption while operating the mailbox in Automotive

Memory corruption while processing a message, when the buffer is controlled by a Guest VM, the value can be changed continuously

Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling

Memory corruption while processing message content in eAVB

Memory corruption while transmitting packet mapping information with invalid header payload size

Memory corruption while processing memory map or unmap IOCTL operations simultaneously

Memory corruption may occur due top improper access control in HAB process

Memory corruption while reading a type value from a buffer controlled by the Guest Virtual Machine

Memory corruption while processing input message passed from FE driver

Memory corruption may occur during communication between primary and guest VM

Memory corruption may occur due to improper input validation in clock device

Memory corruption while reading CPU state data during guest VM suspend

Memory corruption can occur in the camera when an invalid CID is used

Integer Overflow to Buffer Overflow in Automotive OS Platform

Memory corruption during GNSS HAL process initialization

Memory corruption while processing voice packet with arbitrary data received from ADSP