Incorrect Authorization in Graphics Windows

Use After Free in Graphics

Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs

Cryptographic issue occurs due to use of insecure connection method while downloading

Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources

Missing Authentication for Critical Function in Data Modem

Use After Free in DSP Service

Use After Free in Computer Vision

Use After Free in Computer Vision

Buffer Copy Without Checking Size of Input in Automotive Platform

Memory Corruption when adding user-supplied data without checking available buffer space

Memory Corruption when accessing trusted execution environment without proper privilege check

Memory corruption occurs when a secure application is launched on a device with insufficient memory

Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations

Memory corruption while passing pages to DSP with an unaligned starting address

Memory corruption while processing identity credential operations in the trusted application

Memory corruption while loading an invalid firmware in boot loader

Memory corruption while processing MFC channel configuration during music playback

Memory corruption while allocating buffers in DSP service

Memory corruption due to global buffer overflow when a test command uses an invalid payload type

memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency

Memory corruption when programming registers through virtual CDM

Memory corruption during sub-system restart while processing clean-up to free up resources

Memory corruption during dynamic process creation call when client is only passing address and length of shell binary

Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC

Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling

Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads

Memory corruption may occur during the synchronization of the camera`s frame processing pipeline

Memory corruption while handling multuple IOCTL calls from userspace for remote invocation

Memory corruption while processing IOCTL from user space to handle GPU AHB bus error

Memory corruption can occur in the camera when an invalid CID is used

Memory corruption while validating number of devices in Camera kernel

Memory corruption when invalid input is passed to invoke GPU Headroom API call

Memory corruption during GNSS HAL process initialization

Memory corruption while processing voice packet with arbitrary data received from ADSP

Memory corruption while processing GPU commands

Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node

Memory corruption while processing IOCTL calls to unmap the buffers

Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers

Buffer Over-read in WLAN HAL

Buffer Over-read in WLAN Firmware

Transient DOS while processing power control requests with invalid antenna or stream values

Transient DOS while processing the tone measurement response buffer when the response buffer is out of range

Transient DOS may occur while parsing SSID in action frames

Buffer Over-read in WLAN Firmware

Buffer Over-read in WLAN Firmware

Use After Free in Computer Vision

Improper Input Validation in Trusted Execution Environment

Out-of-bounds Write in Camera Driver

Memory corruption while accessing a synchronization object during concurrent operations