Transient DOS while processing the CU information from RNR IE

Memory corruption while handling sensor utility operations

Information disclosure when Video engine escape input data is less than expected minimum size

information disclosure while invoking calibration data from user space to update firmware size

Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware

Buffer Over-read in DSP Service

Transient DOS while processing IOCTL call for image encoding

Transient DOS while processing video packets received from video firmware

Information disclosure while processing IO control commands

Information disclosure during audio playback

Buffer Over-read in Audio

Buffer Over-read in FM Host

Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size

Information disclosure while parsing dts header atom in Video

Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command

Transient DOS in Audio when invoking callback function of ASM driver

Transient DOS in Automotive OS due to improper authentication to the secure IO calls

Information disclosure in WLAN HAL while handling the WMI state info command

Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan

Out-of-bounds Write in Camera Driver

Out-of-bounds Write in Camera Driver

While processing the authentication message in UE, improper authentication may lead to information disclosure