Use of Out-of-range Pointer Offset in WLAN HOST

Stack-based Buffer Overflow in WLAN HOST

Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE

Memory corruption in modem due to improper length check while copying into memory

Cryptographic Issues in BT Controller

Buffer Copy Without Checking Size of Input in Hypervisor

Use After Free in Graphics Linux

Buffer Over-read in WLAN Host Communication

Permissions, Privileges, and Access Controls in Video Analytics and Processing

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Camera_Linux

Improper Validation of Array Index in Automotive Autonomy

Detection of Error Condition Without Action in Hypervisor

Use of Out-of-range Pointer Offset in Trust Management Engine

Use After Free in DSP Service

Improper Validation of Array Index in Camera

Use After Free in Computer Vision

Use of Out-of-range Pointer Offset in Computer Vision

Use After Free in Computer Vision

Untrusted Pointer Dereference in Computer Vision

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Use After Free in Graphics Linux

Memory corruption in Audio when SSR event is triggered after music playback is stopped

Memory corruption in core services when Diag handler receives a command to configure event listeners

Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions

Exposure of Sensitive System Information to an Unauthorized Control Sphere in KERNEL

Buffer Over-read in WLAN Host

Buffer Over-read in WLAN Host Communication

Buffer Over-read in WLAN Host

Buffer Over-read in WLAN Host

Buffer Over-read in WLAN Host

Transient DOS in WLAN firmware while parsing MLO (multi-link operation)

Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement (CSA)

Transient DOS in Audio while remapping channel buffer in media codec decoding

Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet

Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length

Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet

Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call

Information disclosure in modem due to improper check of IP type while processing DNS server query

Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet

Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes

Transient DOS due to uncontrolled resource consumption in WLAN firmware when peer is freed in non qos state

Information disclosure in modem due to buffer over-red while performing checksum of packet received

Denial of service in modem due to missing null check while processing TCP or UDP packets from server

Denial of service in modem due to missing null check while processing IP packets with padding

Denial of service in modem due to null pointer dereference while processing DNS packets

Information disclosure in modem due to buffer over read in dns client due to missing length check

Information disclosure in modem due to buffer over-read while processing response from DNS server

Cryptographic Issues in Core

Time-of-check Time-of-use (TOCTOU) Race Condition in Trusted Execution Environment

Information disclosure in Core services while processing a Diag command