Use After Free in Graphics Linux

Improper Access Control in Graphics Linux

Use After Free in Graphics Linux

Access of Uninitialized Pointer in SPS Applications

Integer Overflow or Wraparound in Core Services

Configuration Issue in Core

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Kernel

Integer Overflow or Wraparound in Radio Interface Layer

Buffer Copy Without Checking Size of Input in Bluetooth HOST

Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Core

Memory corruption in core services when Diag handler receives a command to configure event listeners

Memory corruption in TZ Secure OS while loading an app ELF

Memory corruption in DSP Service during a remote call from HLOS to DSP

Memory Corruption in HLOS while registering for key provisioning notify

Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application

Memory Corruption in Core while invoking a call to Access Control core library with hardware protected address range

Improper Access to the VM resource manager can lead to Memory Corruption

Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode

Memory corruption in WLAN HOST while receiving an WMI event from firmware

Memory corruption due to improper access control in kernel while processing a mapping request from root process

Reachable Assertion in WLAN Firmware

Buffer Over-read in WLAN Firmware

Buffer Copy Without Checking Size of Input in WLAN Host

Buffer Over-read in WLAN HOST

Buffer Over-read in WLAN Firmware

Loop with Unreachable Exit Condition (`Infinite Loop`) in Multi Mode Call Processor

Buffer Over-read in Audio

Buffer Over-read in Video

Reachable Assertion in Data Modem

Incorrect Type Conversion or Cast in Multi-Mode Call Processor

Improper input validation in Multi-Mode Call Processor

Improper Input Validation in Multi-Mode Call Processor

Improper input Validation in Multi-Mode Call Processor

Improper Input Validation in Multi-Mode Call Processor

Reachable Assertion in Multi-Mode Call Processor

Reachable Assertion in Multi-Mode Call Processor

Improper Release of Memory Before Removing Last Reference in Data Modem

Improper Release of Memory Before Removing Last Reference in Data Modem

Improper Input Validation in Multi-Mode Call Processor

Improper Release of Memory Before Removing Last Reference in Multi-Mode Call Processor

Buffer Over-read in WLAN Firmware

Buffer Over-read in Data Modem

Reachable Assertion in Data Modem

Reachable Assertion in Modem

Integer Overflow or Wraparound in Bluetooth Host

Cryptographic issue in Data Modem due to improper authentication during TLS handshake

Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement (CSA)

Transient DOS in Audio while remapping channel buffer in media codec decoding

Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network

Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network