Memory corruption while loading a VM from a signed VM image that is not coherent in the processor cache

Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage

Out-of-bounds Write in Camera Driver

Buffer Copy Without Checking Size of Input in Camera Driver

Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS

Use After Free in DSP Service

Untrusted Pointer Dereference in Audio

Double Free in DSP Services

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

Use After Free in HLOS

Buffer Over-read in WLAN Firmware

Reachable Assertion in BT Controller

Buffer Over-read in Hypervisor

Buffer Over-read in WLAN Host

Use After Free in WLAN Host Communication

Weak Authentication in HLOS

Buffer Over-read in Automotive Software platform based on QNX

Buffer Copy Without Checking Size of Input in Automotive Vehicle Networks

NULL Pointer Dereference in SPS-HLOS

Information Exposure in TZ Secure OS

Improper Authorization in SPS-HLOS

Buffer Over-read in Automotive OS Platform

Buffer Over-read in Automotive Autonomy

Buffer Over-read in Automotive Autonomy

NULL Pointer Dereference in HLOS

Buffer Over-read in TZ Secure OS

NULL Pointer Dereference in Graphics

Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size

Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command

Transient DOS while processing channel information for speaker protection v2 module in ADSP

Transient DOS in Audio when invoking callback function of ASM driver

Out-of-bounds Write in Camera Driver

Out-of-bounds Write in Camera Driver

Out-of-bounds Write in Camera Driver

Out-of-bounds Write in Camera Driver

Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive OS Platform

Permissions, Privileges, and Access Controls issue in Automotive OS Platform