Incorrect Authorization in Graphics

Incorrect Authorization in Graphics Windows

Integer Overflow or Wraparound in Graphics

Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point

Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE

Memory corruption in Modem while processing security related configuration before AS Security Exchange

Stack-based Buffer Overflow in WLAN Firmware

Information disclosure in Modem while processing SIB5

Buffer Copy Without Checking Size of Input in Secure Processor

Improper Validation of Array Index in Secure Processor

Integer Overflow or Wraparound in GPS

Use After Free in SCE-Mink

Use After Free in Graphics Linux

Buffer Over-read in Data Network Stack & Connectivity

Buffer Over-read in Data Network Stack & Connectivity

Buffer Over-read in Data Network Stack & Connectivity

Buffer Over-read in Data Network Stack & Connectivity

Buffer Over-read in Data Network Stack & Connectivity

Buffer Over-read in WLAN Host Communication

Missing Authentication for Critical Function in Data Modem

Permissions, Privileges, and Access Controls in Video Analytics and Processing

Use After Free in DSP Service

NULL Pointer Dereference in SPS Applications

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Improper Access Control in Automotive Multimedia

Improper Access Control in Core

Improper Input Validation in Video Analytics and Processing

Stack-based Buffer Overflow in Performance

Use After Free in GPS

Use After Free in Automotive GPU

Use After Free in Computer Vision

Use After Free in ComputerVision

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Computer Vision

Untrusted Pointer Dereference in Computer Vision

Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive

Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size

Memory corruption in Audio when SSR event is triggered after music playback is stopped

Memory corruption in core services when Diag handler receives a command to configure event listeners

Memory Corruption in Core while invoking a call to Access Control core library with hardware protected address range

Exposure of Sensitive System Information to an Unauthorized Control Sphere in KERNEL

Improper Validation of Syntactic Correctness of Input in Automotive Linux OS

Insecure Security Identifier Mechanism in Multi-Mode Call Processor

Improper Input Validation in Modem

Buffer Over-read in WLAN Host

Buffer Over-read in WLAN Host Communication

Buffer Over-read in WLAN Host

Buffer Over-read in WLAN Host

Buffer Over-read in WLAN Host

Loop with Unreachable Exit Condition (`Infinite Loop`) in Multi Mode Call Processor