Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host

Improper Access Control in Graphics Linux

Use After Free in Graphics

Permissions, Privileges, and Access Control issues in TZ Secure OS

Buffer Over-read in Trusted Execution Environment

Double Free in HLOS

Buffer Copy Without Checking Size of Input in Trusted Execution Environment

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in TZ Secure OS

Use After Free in Graphics Linux

Integer Overflow or Wraparound in HLOS

Use After Free in Kernel

Buffer Over-read in Trusted Execution Environment

Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in SPS-Applications

Buffer Copy Without Checking Size of Input in SPS Applications

Use of Out-of-range Pointer Offset in PCIe

Configuration Issue in Core

Buffer copy without checking size of Input in Core

Use After Free in Audio

Use of Out-of-range Pointer Offset in Audio

Buffer Copy without Checking Size of Input in HLOS

Integer Overflow to Buffer Overflow in User Identity Module

Buffer Copy Without Checking Size of Input in Boot

Improper Restriction of Operations within the Bounds of a Memory Buffer in UTILS

Buffer Copy Without Checking Size of Input in SPS Applications

Buffer Copy Without Checking Size of Input in Audio

Buffer Copy Without Checking Size of Input in Automotive Audio

Improper Restriction of Operations within the Bounds of a Memory Buffer in TZ Secure OS

Improper Authentication in Core

Improper Access to the VM resource manager can lead to Memory Corruption

Memory corruption in WLAN HAL while handling command through WMI interfaces

Memory corruption in WLAN HAL while passing command parameters through WMI interfaces

Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload

Memory corruption in WLAN handler while processing PhyID in Tx status handler

Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload

Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers

Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region

Memory Corruption in Core Platform while printing the response buffer in log

Memory corruption in Core Platform while printing the response buffer in log

Memory corruption while allocating memory in COmxApeDec module in Audio

Memory Corruption in Audio while playing amrwbplus clips with modified content

Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE

Memory Corruption in WLAN HOST while fetching TX status information

Memory Corruption in Data Modem while processing DMA buffer release event about CFR data

Memory Corruption in Audio while allocating the ion buffer during the music playback

Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption

Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode

Memory corruption due to improper access control in kernel while processing a mapping request from root process

Memory corruption due to double free in Core while mapping HLOS address to the list

Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed

Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message