Use After Free in Audio

Improper Input Validation in Secure Processor

Stack-based Buffer Overflow in PMIC

Use After Free in Kernel

Integer Overflow to Buffer Overflow in Graphics Windows

Buffer copy without checking size of input (Classic buffer overflow) in HLOS

NULL Pointer Dereference in Windows Graphics

Buffer Copy Without Checking Size of Input in Bluetooth HOST

Improper Validation of Array Index in Display

Untrusted Pointer Dereference in Display

Use of out-of-range pointer offset in Video

Use After Free in Graphics

Double Free in Data Network Stack & Connectivity

Buffer Copy Without Checking Size of Input in WLAN Host

Buffer Copy Without Checking Size of Input in WLAN Host

Use After Free in Audio

Use After Free in Camera

Improper Restriction of Operations within the Bounds of a Memory Buffer in Radio Interface Layer

Use After Free in Audio

Improper Input Validation in Core

Improper Access Control in Core

Improper Restrictions of Operations within the Bounds of a Memory Buffer in Display

Integer Overflow or Wraparound in Display

Improper Restriction of Operations within the Bounds of a Memory Buffer in Audio

Integer Overflow to Buffer Overflow in RIL

Improper Validation of Array Index in Linux

Improper Validation of Array Index in Audio

Buffer over-read in Modem

Multiple Dmabuf Kernel Address UAF Vulnerability

Multiple Type Confusion Vulnerability

Improper Validation of Array Index in GPS HLOS Driver

Integer Overflow to Buffer Overflow in RIL

Incorrect Type Conversion or Cast in Trusted Execution Environment

Use After Free in Audio

Permissions, Privileges, and Access Controls in Display

Buffer Copy Without Checking Size of Input in Linux

Buffer Copy Without Checking the Size of Input in Audio

Incorrect Type Conversion or Cast in Video

Improper Restrictions of Operations within the Bounds of a Memory Buffer in Linux

Buffer Copy without Checking Size of Input in Data Network Stack & Connectivity

Use after free in Core

Buffer copy without checking the size of input in FM Host

Buffer copy without checking the size of input in Core

Buffer copy without checking the size of input in Core

Memory corruption due to improper validation of array index in computer vision while testing EVA kernel without sending any frames

Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key

Memory Corruption in Multimedia Framework due to integer overflow when synx bind is called along with synx signal

Memory corruption due to incorrect type conversion or cast in audio while using audio playback/capture when crafted address is sent from AGM IPC to AGM

Memory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel

Memory corruption in Automotive Android OS due to improper validation of array index