Incorrect Authorization in Graphics

Incorrect Authorization in Graphics Windows

Use After Free in DSP Service

Buffer Copy Without Checking Size of Input in Powerline Communication Firmware

Cryptographic Issues in BT Controller

Buffer Copy Without Checking Size of Input in Secure Processor

Improper Validation of Array Index in Secure Processor

Integer Overflow or Wraparound in GPS

Memory corruption in WLAN HOST while processing the WLAN scan descriptor list

Integer Overflow or Wraparound in Display

Buffer Over-read in Data Network Stack & Connectivity

Missing Authentication for Critical Function in Data Modem

NULL Pointer Dereference in SPS Applications

Buffer Copy Without Checking Size of Input in Automotive Platform

Use After Free in Camera Driver

Use After Free in BTHOST

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera_Linux

Use of Out-of-range Pointer Offset in Camera Driver

Use After Free in Camera Driver

Use After Free in HLOS

Use After Free in HLOS

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Use After Free in HLOS

Improper Input Validation in Video Analytics and Processing

Buffer Copy Without Checking Size of Input in Graphics Linux

Integer Overflow to Buffer Overflow in Audio

Use After Free in Computer Vision

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive

Improper Input Validation in Secure Processor

Use After Free in HLOS

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Radio Interface Layer

Use After Free in Audio

Use After Free in Camera

Improper Restriction of Operations within the Bounds of a Memory Buffer in Radio Interface Layer

Memory corruption in Linux while sending DRM request

Memory corruption in Linux android due to double free while calling unregister provider after register call

Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key

Memory corruption due to use after free in Modem while modem initialization

Exposure of Sensitive System Information to an Unauthorized Control Sphere in KERNEL

Reachable Assertion in Modem

Use After Free in WLAN Host

Buffer Over-read in Multi Mode Call Processor

Loop with Unreachable Exit Condition (`Infinite Loop`) in Multi Mode Call Processor

Buffer Over-read in Audio

Buffer Over-read in WLAN Host Communication

Buffer Over-read in WLAN HOST

Improper Input Validation in Modem

Transient DOS in Modem while triggering a camping on an 5G cell