Incorrect Authorization in Graphics

Information disclosure may occur while decoding the RTP packet with invalid header extension from network

Use After Free in DSP Service

Use After Free in Computer Vision

Use After Free in Computer Vision

Stack-based Buffer Overflow in Camera Driver

Buffer Copy Without Checking Size of Input in Automotive Platform

Improper Access Control for Register Interface in SCE-Mink

Out-of-bounds Write in Automotive

Incorrect Authorization in Boot

Release of Invalid Pointer or Reference in Android Core

Improper Access Control Applied to Mirrored or Aliased Memory Regions in Hypervisor

Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer

Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur

Memory corruption during the FRS UDS generation process

Memory corruption while processing IOCTL from user space to handle GPU AHB bus error

Memory corruption while validating number of devices in Camera kernel

Buffer Over-read in WLAN Firmware

Transient DOS while processing the tone measurement response buffer when the response buffer is out of range

Transient DOS may occur while parsing SSID in action frames

Buffer Over-read in WLAN Firmware

Buffer Over-read in BT Controller

Buffer Over-read in WLAN Firmware

Use After Free in Computer Vision