Buffer Over-read in Computer Vision

Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS

Improper Input Validation in Trusted Execution Environment

Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation

Out-of-bounds Write in Camera Driver

Use After Free in Camera Driver

Use After Free in Camera Driver

Buffer Copy Without Checking Size of Input in Camera Driver

Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the…

Out of Bounds write in Linux Camera

Integer Underflow (Wrap or Wraparound) in WLAN Host

Buffer Over-read in WLAN Firmware

Reachable Assertion in BT Controller

Transient DOS while processing the CU information from RNR IE

Transient DOS while parsing BTM ML IE when per STA profile is not included

Transient DOS while parsing fragments of MBSSID IE from beacon frame

Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE

Permanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR container whose integrity check has failed, and the other is LPP where UE needs…

Information disclosure when ASLR relocates the IMEM and Secure DDR portions as one chunk in virtual address space

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver

Buffer Over-read in Video

Buffer Over-read in WLAN Host Communication

Information Exposure in Computer Vision

Buffer Over-read in Video

Transient DOS can occur while processing UCI command

Transient DOS in Core when DDR memory check is called while DDR is not initialized

Out-of-bounds Write in Camera Driver

Out-of-bounds Write in Camera Driver