Memory corruption while performing sensor register read operations

Memory corruption while parsing clock configuration data for a specific hardware type

Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the…

Out of Bounds write in Linux Camera

Transient DOS when processing a received frame with an excessively large authentication information element

Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan

Memory corruption while processing a config call from userspace

Information disclosure while processing a firmware event

Buffer Over-read in WLAN Host Communication

Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID

Transient DOS while parsing video packets received from the video firmware

Out-of-bounds Write in Camera Driver