Out-of-bounds Write in Windows Compute

Stack-based Buffer Overflow in Windows Compute

Stack-based Buffer Overflow in Windows Compute

Out-of-bounds Write in Core Services

Use After Free in Camera Driver

Buffer Copy Without Checking Size of Input in Camera Driver

Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the…

Out of Bounds write in Linux Camera

Integer Underflow (Wrap or Wraparound) in WLAN Host

Buffer Over-read in WLAN Firmware

Transient DOS while processing the CU information from RNR IE

Transient DOS while parsing BTM ML IE when per STA profile is not included

Transient DOS while parsing fragments of MBSSID IE from beacon frame

Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE

Permanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR container whose integrity check has failed, and the other is LPP where UE needs…

Information disclosure when ASLR relocates the IMEM and Secure DDR portions as one chunk in virtual address space

Buffer Over-read in Video

Buffer Over-read in Video

Buffer Over-read in WLAN Host Communication

Buffer Over-read in DSP Service

Buffer Over-read in Camera

Transient DOS can occur while processing UCI command

Information Disclosure while processing IOCTL request in FastRPC

Transient DOS in Core when DDR memory check is called while DDR is not initialized

Out-of-bounds Write in Camera Driver