Stack-based Buffer Overflow in OOBM

Out-of-bounds Read in OOBM

Use After Free in DSP_Services

Use After Free in DSP Service

Integer Overflow or Wraparound in OOBM

Out-of-bounds Write in DSP Service

Untrusted Pointer Dereference in Camera

Out-of-bounds Write in Video

Out-of-bounds Write in Video

Untrusted Pointer Dereference in Windows Compute

Buffer Copy Without Checking Size of Input in Biometrics

Buffer Over-read in Windows Compute

Out-of-bounds Write in DSP Service

Out-of-bounds Read in DSP Service

Exposed dangerous function in windows host

Buffer Copy Without Checking Size of Input in Power Management IC

Use After Free in DSP Service

Buffer Over-read in Camera

Buffer Over-read in Camera

Buffer Over-read in Camera

Buffer Over-read in Camera

Buffer Over-read in Camera

Heap-Based Buffer Overflow in Power Management IC

Buffer Over-read in WinBlast Driver

Buffer Over-read in Camera

Buffer Copy Without Checking Size of Input in Automotive Platform

Memory Corruption when processing invalid user address with nonstandard buffer address

Memory Corruption while processing IOCTL call to update sensor property settings with invalid input parameters

Memory Corruption when multiple threads simultaneously access a memory free API

Memory Corruption when user space address is modified and passed to mem_free API, causing kernel memory to be freed inadvertently

Memory corruption while preprocessing IOCTLs in sensors

Memory Corruption when multiple threads concurrently access and modify shared resources

Memory corruption while processing a video session to set video parameters

Memory corruption while handling concurrent memory mapping and unmapping requests from a user-space application

Memory corruption while accessing a buffer during IOCTL processing

Memory corruption while processing audio streaming operations

Memory corruption while invoking remote procedure IOCTL calls

Memory corruption while processing an escape call

memory corruption while processing an image encoding completion event

Memory corruption while processing IOCTL call to get the mapping

Memory corruption while processing escape commands from userspace

Memory corruption while processing camera platform driver IOCTL calls

Buffer Over-read in WLAN Firmware

Allocation of Resources Without Limits or Throttling in OOBM

Buffer Over-read in WLAN Firmware

Buffer Over-read in OOBM

Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain

Buffer Over-read in Qualcomm IPC

Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service