Buffer Copy Without Checking Size of Input in Biometrics

Buffer Over-read in Windows Compute

Out-of-bounds Write in DSP Service

Out-of-bounds Read in DSP Service

NULL Pointer Dereference in HLOS

Exposed dangerous function in windows host

Buffer Copy Without Checking Size of Input in Power Management IC

Use After Free in DSP Service

Buffer Over-read in Camera

Buffer Over-read in Camera

Buffer Over-read in Camera

Buffer Over-read in Camera

Buffer Over-read in Camera

Heap-Based Buffer Overflow in Power Management IC

Buffer Over-read in WinBlast Driver

Buffer Over-read in Camera

Memory Corruption when processing invalid user address with nonstandard buffer address

Memory Corruption when accessing buffers with invalid length during TA invocation

Memory Corruption while processing IOCTL call to update sensor property settings with invalid input parameters

Memory Corruption when multiple threads simultaneously access a memory free API

Memory Corruption when user space address is modified and passed to mem_free API, causing kernel memory to be freed inadvertently

Memory corruption while preprocessing IOCTLs in sensors

Memory Corruption when multiple threads concurrently access and modify shared resources

Memory corruption while processing a video session to set video parameters

Memory corruption while handling concurrent memory mapping and unmapping requests from a user-space application

Memory corruption while accessing a buffer during IOCTL processing

Memory corruption while processing audio streaming operations

Memory corruption while invoking remote procedure IOCTL calls

Memory corruption while processing an escape call

memory corruption while processing an image encoding completion event

Memory corruption while processing IOCTL call to get the mapping

Memory corruption while processing escape commands from userspace

Memory corruption while processing a malformed license file during reboot

Memory corruption while processing camera platform driver IOCTL calls

Buffer Over-read in WLAN Firmware

Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

Buffer Copy Without Checking Size of Input in Bluetooth HOST

Out-of-bounds Write in Windows Compute

Stack-based Buffer Overflow in Windows Compute

Stack-based Buffer Overflow in Windows Compute

Out-of-bounds Write in Core Services

Information disclosure while processing batch command execution in Video driver

Buffer Over-read in DSP Service

Transient DOS while processing IOCTL call for image encoding