Integer Overflow to Buffer Overflow in TZ Secure OS

Buffer Over-read in Multi Mode Call Processor

Missing Authorization in Core

Out-of-bounds Write in Display

Incorrect Calculation of Buffer Size in HLOS

Buffer Over-read in MProc

Permissions, Privileges, and Access Control issues in TZ Secure OS

Buffer Over-read in Trusted Execution Environment

Double Free in HLOS

Buffer Copy Without Checking Size of Input in Trusted Execution Environment

Buffer Copy Without Checking Size of Input in SPS Applications

Use of Out-of-range Pointer Offset in Audio

Buffer copy without checking size of Input in Core

Use of Out-of-range Pointer Offset in Audio

Integer Overflow or Wraparound in TZ Secure OS

Buffer Copy without Checking Size of Input in HLOS

Integer Overflow to Buffer Overflow in User Identity Module

Buffer Copy Without Checking Size of Input in Boot

Improper Restriction of Operations within the Bounds of a Memory Buffer in UTILS

Improper Restriction of Operations within the Bounds of a Memory Buffer in MPP Performance

Buffer Copy Without Checking Size of Input in SPS Applications

Improper Authorization in HLOS

Improper Restriction of Operations within the Bounds of a Memory Buffer in TZ Secure OS

Improper Authentication in Core

Double free in Core

Integer overflow or wraparound in WLAN

Improper validation of array index in User Identity Module

Buffer Over-read in Multi Mode Call Processor

Improper Authentication in Multi-Mode Call Processor

Improper authorization in Modem

Buffer over-read in Modem

NULL pointers dereference in Modem

Buffer over-read in Modem

Buffer over-read in Modem

Buffer over-read in Modem

Null Point Dereference in MODEM

Buffer Over-read in MODEM

Cryptographic Issues in Core

Improper Input Validation in Trusted Execution Environment