Use After Free in GPS HLOS Driver

Improper Input Validation in HLOS

Improper Access Control in Hypervisor

Use of Out-of-range Pointer Offset in Camera Driver

Use After Free in Camera Driver

Out-of-bounds Read in Windows WLAN Host

Out-of-bounds Read in Windows WLAN Host

Improper Validation of Array Index in Display

Buffer Over-read in Display

Use of Out-of-range Pointer Offset in Trust Management Engine

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Improper Validation of Array Index in Graphics_Linux

Use After Free in Windows WLAN Host

Stack-based Buffer Overflow in WLAN Windows Host

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host

Buffer Copy Without Checking Size of Input in Data Network Stack & Connectivity

Stack-based Buffer Overflow in WLAN Windows Host

Stack-based Buffer Overflow in Performance

Use After Free in GPS

Buffer Copy Without Checking Size of Input in Graphics Linux

Integer Overflow to Buffer Overflow in Audio

Use After Free in Graphics Linux

Use After Free in Automotive GPU

Use After Free in Computer Vision

Improper Input Validation in Camera

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Untrusted Pointer Dereference in DSP Service

Use After Free in Qualcomm IPC

Untrusted Pointer Dereference in Computer Vision

Use After Free in Graphics Linux

Use After Free in Graphics Linux

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive

Improper Restriction of Operations withing the Bounds of a Memory Buffer in DSP Services

Improper Input Validation in Secure Processor

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

Integer Overflow to Buffer Overflow in Graphics Windows

NULL Pointer Dereference in Windows Graphics

Buffer Copy Without Checking Size of Input in Bluetooth HOST

Double Free in Data Network Stack & Connectivity

Buffer Copy Without Checking Size of Input in WLAN Host

Buffer Copy Without Checking Size of Input in WLAN Host

Use After Free in Audio

Use After Free in Camera

Improper Restriction of Operations within the Bounds of a Memory Buffer in Radio Interface Layer

Use After Free in Audio

Improper Access Control in Core

Improper Restrictions of Operations within the Bounds of a Memory Buffer in Display

Improper Restriction of Operations within the Bounds of a Memory Buffer in Audio

Integer Overflow to Buffer Overflow in RIL