Incorrect Authorization in Graphics

Improper Authentication in GPS_GNSS

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions

Buffer Copy Without Checking Size of Input in Secure Processor

Improper Validation of Array Index in Secure Processor

Reusing a Nonce, Key Pair in Encryption in Automotive Platform

Use After Free in DSP Service

Use After Free in Computer Vision

Use After Free in Computer Vision

Stack-based Buffer Overflow in Camera Driver

Buffer Copy Without Checking Size of Input in Automotive Platform

Out-of-bounds Write in Automotive

Improper Release of Memory Before Removing Last Reference in Graphics

Double Free in Graphics

Buffer Copy Without Checking Size of Input in DSP Service

Buffer Copy without Checking Size of Input in DSP Service

Use After Free in HLOS

Integer Overflow or Wraparound in Audio

Use After Free in DSP Service

Integer Overflow or Wraparound in DSP Service

Release of Invalid Pointer or Reference in Android Core

Buffer Over-read in BT Controller

Buffer Copy Without Checking Size of Input in Computer Vision

Use After Free in DSP Service

Memory corruption during dynamic process creation call when client is only passing address and length of shell binary

Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC

Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur

Memory corruption during the FRS UDS generation process

Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions

Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling

Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads

Memory corruption may occur during the synchronization of the camera`s frame processing pipeline

Memory corruption while handling multuple IOCTL calls from userspace for remote invocation

Memory corruption while processing IOCTL from user space to handle GPU AHB bus error

Memory corruption in Camera due to unusually high number of nodes passed to AXI port

Memory corruption while validating number of devices in Camera kernel

Memory corruption when invalid input is passed to invoke GPU Headroom API call

Memory corruption during GNSS HAL process initialization

Memory corruption while processing GPU commands

Memory corruption while handling session errors from firmware

Buffer Over-read in WLAN HAL

Buffer Over-read in WLAN Firmware

Transient DOS may occur while parsing SSID in action frames

Buffer Over-read in BT Controller

Buffer Over-read in WLAN Firmware

Use After Free in Computer Vision

Out-of-bounds Write in Camera Driver

Use After Free in Camera Driver

Use After Free in Camera Driver

Buffer Copy Without Checking Size of Input in Camera Driver