Out-of-bounds Read in Windows WLAN Host

Use After Free in DSP Service

Improper Validation of Array Index in Display

Buffer Over-read in Display

Use of Out-of-range Pointer Offset in Trust Management Engine

Untrusted Pointer Dereference in DSP_Services

Untrusted Pointer Dereference in DSP_Services

Improper Validation of Array Index in Camera

Use After Free in DSP Service

Improper Validation of Array Index in Graphics_Linux

Use of Out-of-range Pointer Offset in WLAN Windows Host

Improper Validation of Array Index in Camera

Improper Validation of Array Index in Camera Driver

Use of Out-of-range Pointer Offset in Display

Use After Free in Windows WLAN Host

Improper Input Validation in Computer Vision

Use After Free in Computer Vision

Use After Free in Computer Vision

Improper Validation of Array Index in DSP Services

Buffer Over-read in WLAN Windows Host

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host

Buffer Over-read in WLAN Windows Host

Stack-based Buffer Overflow in WLAN Windows Host

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host

Use After Free in Computer Vision

Use After Free in Computer Vision

Use of Out-of-range Pointer Offset in Computer Vision

Buffer Copy Without Checking Size of Input in Data Network Stack & Connectivity

Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information

Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver

Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver

Memory corruption when invalid input is passed to invoke GPU Headroom API call

Memory corruption during GNSS HAL process initialization

Memory corruption while processing voice packet with arbitrary data received from ADSP

Memory corruption while processing GPU commands

Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node

Memory corruption while handling session errors from firmware

Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice

Memory corruption while station LL statistic handling

Memory corruption while processing IOCTL calls to unmap the buffers

Memory corruption while taking snapshot when an offset variable is set by camera driver

Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Computer Vision

Buffer Over-read in Display

Untrusted Pointer Dereference in Computer Vision

Memory corruption when kernel driver attempts to trigger hardware fences

Memory corruption when memory mapped in a VBO is not unmapped by the GPU SMMU

Memory corruption during session sign renewal request calls in HLOS

Memory corruption when keymaster operation imports a shared key

Memory corruption while processing IOCTL handler in FastRPC