Use After Free in Audio

Buffer Copy without Checking Size of Input in Audio

Use After Free in Automotive Display

Signed-to-unsigned conversion error in Audio

Improper Input Validation in HLOS

Buffer Copy Without Checking Size of Input in VR Service

Use After Free in Graphics

Stack-based Buffer Overflow in WIN Product

Improper Restrictions of Operations within the Bounds of a Memory Buffer in Display

Integer Overflow or Wraparound in Display

Improper Restriction of Operations within the Bounds of a Memory Buffer in Audio

Integer Overflow to Buffer Overflow in RIL

Improper Validation of Array Index in Linux

Buffer over-read in Modem

Multiple Type Confusion Vulnerability

Incorrect Type Conversion or Cast in Core

Improper Validation of Array Index in GPS HLOS Driver

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN

Integer Overflow to Buffer Overflow in RIL

Untrusted Pointer Dereference in Automotive

Incorrect Type Conversion or Cast in Trusted Execution Environment

Use After Free in Audio

Permissions, Privileges, and Access Controls in Display

Incorrect Type Conversion or Cast in Video

Improper Restrictions of Operations within the Bounds of a Memory Buffer in Linux

Buffer Copy without Checking Size of Input in Data Network Stack & Connectivity

Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux

Improper Input Validation in Audio

Improper Input Validation in WLAN HOST

Stack-based Buffer Overflow in Automotive GPU

Double free in Linux Networking

Double free in Automotive

Improper restriction of operations within the bounds of memory buffer in Linux

Buffer copy without checking the size of input in FM Host

Double free in Linux-Android

Buffer copy without checking the size of input in Core

Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool

Memory corruption in HAB Memory management due to broad system privileges via physical address

Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key

Memory corruption due to use after free in Modem while modem initialization

Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback

Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment

Memory corruption in Automotive Android OS due to improper validation of array index

Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity

Memory corruption due to stack based buffer overflow in core while sending command from USB of large size

Memory corruption in WLAN due to use after free

Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD

Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call session from user space with invalid session id

Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory

Memory corruption due to stack-based buffer overflow in Core