Buffer Copy Without Checking Size of Input in Kernel
Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping.
Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping.
Denial of service while processing fastboot flash command on mmc due to buffer over read
Memory corruption in core due to stack-based buffer overflow
Memory corruption in Core due to stack-based buffer overflow.
Memory corruption in Automotive Android OS due to improper input validation.
Transient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protocol PDU with zero length data.
Transient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed.
Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.
Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.
Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
Memory corruption in modem due to use of out of range pointer offset while processing qmi msg
Memory corruption in Core Platform while printing the response buffer in log.
Memory Corruption in Core Platform while printing the response buffer in log.
Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region.
Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.
Memory corruption in WLAN HAL while passing command parameters through WMI interfaces.
Memory corruption in WLAN HAL while handling command streams through WMI interfaces.
Information disclosure while parsing the OCI IE with invalid length.