Improper Input Validation in WLAN Resource Manager

Untrusted Pointer Dereference in TZ Firmware

Use of Out-of-range Pointer Offset in TZ Firmware

Buffer Over-read in Data HLOS - LNX

Buffer Over-read in Data Network Stack & Connectivity

Buffer Over-read in Data Network Stack & Connectivity

Buffer Over-read in WLAN Host Communication

Permissions, Privileges, and Access Controls in Video Analytics and Processing

Improper Access Control Applied to Mirrored or Aliased Memory Regions in Hypervisor

Buffer Copy Without Checking Size of Input in Computer Vision

Out-of-bounds Write in Computer Vision

Improper Input Validation in HLOS

Use After Free in MProc

Improper Validation of Array Index in Camera

Improper Input Validation in Hypervisor

Improper Input Validation in Video Analytics and Processing

Improper Validation of Array Index in Hypervisor

Use After Free in Computer Vision

Return of Stack Variable Address in Buses

Memory corruption in TZ Secure OS while requesting a memory allocation from TA region

Memory Corruption in Core Platform while printing the response buffer in log

Memory corruption in Core Platform while printing the response buffer in log

Memory corruption in Linux Networking due to double free while handling a hyp-assign

Buffer Over-read in WLAN HAL

Reachable Assertion in WLAN Firmware

Buffer Over-read in WLAN HAL

Buffer Over-read in WLAN Host Communication

Buffer Over-read in WLAN Firmware

Buffer Copy Without Checking Size of Input in WLAN Host

Buffer Over-read in WLAN HOST

Integer Overflow or Wraparound in WLAN Host Communication

Buffer Over-read in WLAN Host Communication

Buffer Over-read in WLAN Host Communication

Buffer Over-read in WLAN Firmware

Buffer Over-read in WLAN Host Communication

Buffer Over-read in WLAN HOST

Integer Underflow (Wrap or Wraparound) in WLAN Host Communication

Transient DOS in WLAN firmware while parsing MLO (multi-link operation)

Transient DOS in WLAN Firmware while parsing FT Information Elements

Transient DOS due to buffer over-read in WLAN while sending a packet to device

Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes

Transient DOS due to uncontrolled resource consumption in WLAN firmware when peer is freed in non qos state

Exposed Dangerous Method or Function in HLOS

Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage

Out-of-bounds Read in Core

Out-of-bounds Read in Core

Improper Access Control for Register Interface in TZ Firmware

Buffer Over-read in Hypervisor

Buffer Over-read in WLAN Host

Use After Free in WLAN Host Communication