Buffer Copy Without Checking Size of Input in Hypervisor

Use After Free in Graphics Linux

Buffer Over-read in WLAN Host Communication

Permissions, Privileges, and Access Controls in Video Analytics and Processing

Use After Free in Video

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Camera_Linux

Improper Validation of Array Index in Automotive Autonomy

Detection of Error Condition Without Action in Hypervisor

Use of Out-of-range Pointer Offset in Trust Management Engine

Use After Free in DSP Service

Improper Validation of Array Index in Camera

Use After Free in Computer Vision

Use of Out-of-range Pointer Offset in Computer Vision

Use After Free in Computer Vision

Untrusted Pointer Dereference in Computer Vision

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Use After Free in Graphics Linux

Use After Free in Audio

Improper Input Validation in Core

Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions

Exposure of Sensitive System Information to an Unauthorized Control Sphere in KERNEL

Buffer Over-read in WLAN Host

Buffer Over-read in WLAN Host Communication

Buffer Over-read in WLAN Host

Buffer Over-read in WLAN Host

Buffer Over-read in WLAN Host

Buffer Over-read in WLAN Firmware

Improper Authorization in WLAN Host

Buffer Over-read in Audio

Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet

Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length

Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet

Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call

Information disclosure in modem due to improper check of IP type while processing DNS server query

Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet

Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes

Transient DOS due to uncontrolled resource consumption in WLAN firmware when peer is freed in non qos state

Information disclosure in modem due to buffer over-red while performing checksum of packet received

Denial of service in modem due to missing null check while processing TCP or UDP packets from server

Denial of service in modem due to missing null check while processing IP packets with padding

Denial of service in modem due to null pointer dereference while processing DNS packets

Information disclosure in modem due to buffer over read in dns client due to missing length check

Information disclosure in modem due to buffer over-read while processing response from DNS server

Cryptographic Issues in Core

Time-of-check Time-of-use (TOCTOU) Race Condition in Trusted Execution Environment