Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point

Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE

Cryptographic Issues in BT Controller

Use After Free in Graphics Linux

Buffer Over-read in WLAN Host Communication

Permissions, Privileges, and Access Controls in Video Analytics and Processing

Use of Out-of-range Pointer Offset in Trust Management Engine

Use After Free in Computer Vision

Untrusted Pointer Dereference in Computer Vision

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Memory corruption in core services when Diag handler receives a command to configure event listeners

Exposure of Sensitive System Information to an Unauthorized Control Sphere in KERNEL

Buffer Over-read in WLAN Host

Insufficient Granularity of Access Control in Core

Buffer Over-read in WLAN Host Communication

Buffer Over-read in WLAN Host

Buffer Over-read in WLAN Host

Buffer Over-read in WLAN Host

Transient DOS in Audio while remapping channel buffer in media codec decoding

Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet

Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length

Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet

Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call

Information disclosure in modem due to improper check of IP type while processing DNS server query

Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet

Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation

Information disclosure in Core services while processing a Diag command

Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS

Use of Out-of-range Pointer Offset in ComputerVision

Reachable Assertion in BT Controller

Improper Access Control for Register Interface in TZ Firmware

Buffer Over-read in WLAN Host

Buffer Over-read in WLAN Firmware

Use After Free in WLAN Host Communication

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver

Weak Authentication in HLOS