Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Camera_Linux

Improper Validation of Array Index in Graphics_Linux

Improper Validation of Array Index in Camera

Improper Validation of Array Index in Camera Driver

Use of Out-of-range Pointer Offset in Display

Use After Free in Windows WLAN Host

Stack-based Buffer Overflow in WLAN Windows Host

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host

Use After Free in Computer Vision

Use of Out-of-range Pointer Offset in Computer Vision

Buffer Copy Without Checking Size of Input in Data Network Stack & Connectivity

Stack-based Buffer Overflow in WLAN Windows Host

Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Windows Host

Stack-based Buffer Overflow in Performance

Use After Free in GPS

Buffer Copy Without Checking Size of Input in Graphics Linux

Integer Overflow to Buffer Overflow in Audio

Use After Free in Graphics Linux

Use After Free in Automotive GPU

Use After Free in Computer Vision

Stack-based Buffer Overflow in WLAN Windows Host

Buffer Copy Without Checking Size of Input in WLAN Windows Host

Use After Free in ComputerVision

Use After Free in Graphics

Improper Input Validation in Camera

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Use After Free in Qualcomm IPC

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Computer Vision

Buffer Over-read in Display

Untrusted Pointer Dereference in Computer Vision

Use After Free in Graphics Linux

Use After Free in Graphics Linux

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive

Improper Restriction of Operations withing the Bounds of a Memory Buffer in DSP Services

Improper Access Control in Graphics Windows

Use After Free in Audio

Memory corruption when the channel ID passed by user is not validated and further used

Memory corruption when size of buffer from previous call is used without validation or re-initialization

Memory corruption in Kernel while handling GPU operations

Memory corruption while allocating memory for graphics

Memory corruption in HLOS while running kernel address sanitizers (syzkaller) on tmecom with DEBUG_FS enabled

Memory corruption while invoking the SubmitCommands call on Gfx engine during the graphics render

Memory corruption while processing the IOCTL FM HCI WRITE request

Memory corruption when negative display IDs are sent as input while processing DISPLAYESCAPE event trigger

Memory corruption while reading ACPI config through the user mode app

Memory corruption when malformed message payload is received from firmware

Memory corruption in Graphics Driver when destroying a context with KGSL_GPU_AUX_COMMAND_TIMELINE objects queued

Memory corruption when IPv6 prefix timer object`s lifetime expires which are created while Netmgr daemon gets an IPv6 address

Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache