NULL Pointer Dereference in Display

Improper Validation of Array Index in Audio

Improper Validation of Array Index in Camera

Buffer Copy Without Checking Size of Input in Graphics Linux

Integer Overflow to Buffer Overflow in Audio

Use After Free in Automotive GPU

Use After Free in Computer Vision

Use After Free in DSP Services

Use After Free in DSP Service

Return of Stack Variable Address in Buses

Use After Free in Automotive Telematics

Improper Access Control in Graphics Linux

Use After Free in Graphics Linux

Integer Overflow or Wraparound in Automotive GPU

Use of Uninitialized Variable in Automotive GPU

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Use After Free in Graphics

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Qualcomm IPC

Permissions, Privileges, and Access Control issues in TZ Secure OS

Buffer Over-read in Trusted Execution Environment

Double Free in HLOS

Buffer Copy Without Checking Size of Input in Trusted Execution Environment

Use of Out-of-range Pointer Offset in Video

Use After Free in Graphics Linux

Use After Free in Kernel

Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in SPS-Applications

Buffer Copy Without Checking Size of Input in SPS Applications

Integer Overflow or Wraparound in Core Services

Use After Free in Automotive Multimedia

Use After Free in Automotive Multimedia

Use of Out-of-range Pointer Offset in Audio

Improper Input Validation in Services

Use of Out-of-range Pointer Offset in PCIe

Buffer copy without checking size of Input in Core

Use After Free in Audio

Use After Free in Automotive Audio

Use After Free in Audio

Use after free in Neural Processing Unit

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Kernel

Use After Free in Linux Graphics

Integer Overflow or Wraparound in Radio Interface Layer

Use of Out-of-range Pointer Offset in Audio

Integer Overflow or Wraparound in TZ Secure OS

Buffer Copy without Checking Size of Input in HLOS

NULL pointer dereference in WLAN Firmware

Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Core

Use of Out-of-range Pointer Offset in Audio

Integer Overflow to Buffer Overflow in HLOS

Integer Overflow to Buffer Overflow in User Identity Module

Buffer Copy Without Checking Size of Input in Boot