Incorrect Authorization in Graphics Windows

Buffer Copy Without Checking Size of Input in Secure Processor

Improper Validation of Array Index in Secure Processor

Memory corruption in BTHOST due to double free while music playback and calls over bluetooth headset in Snapdragon Mobile

Cryptographic issue may occur while encrypting license data

Use After Free in SCE-Mink

Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker

Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources

Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards

Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE

Missing Authentication for Critical Function in Data Modem

Buffer Copy Without Checking Size of Input in Automotive Platform

Buffer Over-read in Graphics

Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors

Memory corruption while deinitializing a HDCP session

Memory corruption while loading an invalid firmware in boot loader

Memory corruption while processing MFC channel configuration during music playback

Memory corruption while handling invalid inputs in application info setup

Memory corruption due to global buffer overflow when a test command uses an invalid payload type

memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency

Memory corruption when programming registers through virtual CDM

Memory corruption during sub-system restart while processing clean-up to free up resources

Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC

Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer

Memory corruption during the FRS UDS generation process

Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling

Memory corruption while handling multiple IOCTL calls from userspace to operate DMA operations

Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads

Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation

Memory corruption may occur during the synchronization of the camera`s frame processing pipeline

Memory corruption while handling multuple IOCTL calls from userspace for remote invocation

Memory corruption while processing IOCTL from user space to handle GPU AHB bus error

Memory corruption in Camera due to unusually high number of nodes passed to AXI port

Memory corruption while validating number of devices in Camera kernel

Memory corruption while processing frame packets

Memory corruption while invoking IOCTL calls from user-space to kernel-space to handle session errors

Memory corruption while registering a buffer from user-space to kernel-space using IOCTL calls

Use After Free in Computer Vision

Use After Free in Computer Vision

Use of Out-of-range Pointer Offset in Computer Vision

Buffer Copy Without Checking Size of Input in Data Network Stack & Connectivity

Memory corruption when invalid input is passed to invoke GPU Headroom API call

Memory corruption during GNSS HAL process initialization

Memory corruption while processing voice packet with arbitrary data received from ADSP

Memory corruption while processing GPU commands

Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node

Memory corruption while handling session errors from firmware

Memory corruption while processing IOCTL calls to unmap the buffers

Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Computer Vision