Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage

Memory Corruption in Modem due to double free while parsing the PKCS15 sim files

Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card

Use After Free in Video

Use of Out-of-range Pointer Offset in Camera Driver

Improper Validation of Array Index in Camera_Linux

Out of Bounds write in Linux Camera

Use After Free in HLOS

Buffer Copy Without Checking Size of Input in Audio

Use After Free in Data Network Stack & Connectivity

Out-of-bounds Write in Audio

Use After Free in HLOS

Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver

Buffer Over-read in Audio

Buffer Over-read in Neural Processing Unit

Improper Authorization in SPS-HLOS

Buffer Over-read in Automotive Multimedia

Buffer Over-read in Audio

Buffer Over-read in Audio

Buffer Over-read in TZ Secure OS

Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size

Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command

Transient DOS in Audio when invoking callback function of ASM driver

Transient DOS in Automotive OS due to improper authentication to the secure IO calls

Information Disclosure in Qualcomm IPC while reading values from shared memory in VM

information disclosure due to cryptographic issue in Core during RPMB read request