Out-of-bounds Write in Camera Driver

Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service

Memory corruption while unmapping the fastrpc map when two threads can free the same map in concurrent scenario

Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playback and record

Buffer Over-read in WLAN Firmware

Reachable Assertion in BT Controller

Transient DOS while processing the CU information from RNR IE

Transient DOS while parsing fragments of MBSSID IE from beacon frame

Buffer Over-read in Video

Buffer Over-read in Automotive Software platform based on QNX

Buffer Over-read in Video

Buffer Copy Without Checking Size of Input in Automotive Vehicle Networks

Buffer Over-read in Automotive OS Platform

transient DOS when setting up a fence callback to free a KGSL memory entry object during DMA

Transient DOS while processing channel information for speaker protection v2 module in ADSP

Out-of-bounds Write in Camera Driver

Out-of-bounds Write in Camera Driver

Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive OS Platform

Permissions, Privileges, and Access Controls issue in Automotive OS Platform