Use After Free in DSP Service

Use of Out-of-range Pointer Offset in Graphics

Memory corruption while selecting the PLMN from SOR failed list

Memory corruption while playing audio file having large-sized input buffer

Memory corruption while parsing qcp clip with invalid chunk data size

Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size

Memory corruption in video while parsing invalid mp2 clip

Memory corruption in Modem while processing security related configuration before AS Security Exchange

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network

Buffer Copy Without Checking Size of Input in Secure Processor

Improper Validation of Array Index in Secure Processor

Memory corruption in Hypervisor when platform information mentioned is not aligned

Cryptographic issue may occur while encrypting license data

Integer Overflow or Wraparound in Display

Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set

Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call

Information disclosure may occur while decoding the RTP packet with invalid header extension from network

Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards

Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE

Buffer Over-read in Multi Mode Call Processor

Use After Free in DSP_Services

Use After Free in DSP Service

Missing Authorization in Core

Out-of-bounds Write in DSP Service

Untrusted Pointer Dereference in Camera

Out-of-bounds Write in Video

Buffer Over-read in Windows Compute

Use After Free in Computer Vision

Use After Free in Computer Vision

Out-of-bounds Write in DSP Service

Buffer Over-read in Camera

Buffer Over-read in Camera

Buffer Over-read in Camera

Buffer Over-read in Camera

Buffer Over-read in Camera

Heap-Based Buffer Overflow in Power Management IC

Buffer Over-read in WinBlast Driver

Stack-based Buffer Overflow in Camera Driver

Buffer Over-read in Camera

Buffer Copy Without Checking Size of Input in Automotive Platform

Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs

Memory corruption while handling different IOCTL calls from the user-space simultaneously

Memory corruption occurs when a secure application is launched on a device with insufficient memory

Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations

Memory corruption while passing pages to DSP with an unaligned starting address

Memory corruption while processing identity credential operations in the trusted application

Memory corruption while processing a video session to set video parameters

Memory Corruption when processing IOCTLs for JPEG data without verification

Memory corruption while loading an invalid firmware in boot loader

Memory corruption while copying packets received from unix clients