Use of Out-of-range Pointer Offset in Graphics

Improper Validation of Array Index in Multi-Mode Call Processor

Improper Input Validation in WLAN Resource Manager

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

Memory corruption while processing Codec2 during v13k decoder pitch synthesis

Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake

Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call

Memory corruption in Modem while processing security related configuration before AS Security Exchange

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network

Memory corruption due to improper validation of array index in Multi-mode call processor

Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length

Improper Authentication in GPS_GNSS

Information disclosure in Modem while processing SIB5

Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data

Stack-based Buffer Overflow in WLAN Host

Untrusted Pointer Dereference in TZ Firmware

Use of Out-of-range Pointer Offset in TZ Firmware

Buffer Copy Without Checking Size of Input in Hypervisor

Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information

Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet

Buffer Over-read in Multi Mode Call Processor

Out-of-bounds Write in HLOS

Integer Overflow or Wraparound in Audio

Buffer Copy Without Checking Size of Input in Core Services

Out-of-bounds Write in Computer Vision

Buffer Copy Without Checking Size of Input in Graphics Linux

Use After Free in Computer Vision

Use After Free in DSP Services

Use After Free in DSP Service

Return of Stack Variable Address in Buses

Use After Free in Graphics Linux

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Use After Free in Graphics

Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux Boot Loader

Permissions, Privileges, and Access Control issues in TZ Secure OS

Buffer Over-read in Trusted Execution Environment

Buffer Copy Without Checking Size of Input in Trusted Execution Environment

Use of Out-of-range Pointer Offset in Video

Use After Free in Graphics Linux

Memory corruption in Core when updating rollback version for TA and OTA feature is enabled

Memory corruption when resource manager sends the host kernel a reply message with multiple fragments

Memory corruption while running VK synchronization with KASAN enabled

Memory corruption in wearables while processing data from AON

Memory corruption while receiving a message in Bus Socket Transport Server

Memory corruption in TZ Secure OS while requesting a memory allocation from TA region

Memory corruption in HLOS while invoking IOCTL calls from user-space

Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level

Memory corruption in core services when Diag handler receives a command to configure event listeners

Cryptographic issue in HLOS during key management

Memory corruption in TZ Secure OS while loading an app ELF