Buffer Copy Without Checking Size of Input in Camera Driver

Memory corruption while processing shared command buffer packet between camera userspace and kernel.

Buffer Copy Without Checking Size of Input in Camera Driver

Memory corruption while parsing clock configuration data for a specific hardware type.

Use After Free in Camera Driver

Memory corruption while performing sensor register read operations.

Use After Free in Camera Driver

Memory corruption while accessing a synchronization object during concurrent operations.

Use After Free in HLOS

Memory corruption while deinitializing a HDCP session.

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver

Memory corruption while handling sensor utility operations.

Reusing a Nonce, Key Pair in Encryption in Automotive Platform

Cryptographic issue may occur while encrypting license data.

Out-of-bounds Write in HLOS

Memory corruption while processing a secure logging command in the trusted application.

Buffer Copy Without Checking Size of Input in Core Services

Memory corruption while copying packets received from unix clients.

Double Free in Video

Memory Corruption when multiple threads concurrently access and modify shared resources.

Information Exposure in Computer Vision

Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.

Untrusted Pointer Dereference in Camera

Memory corruption while preprocessing IOCTLs in sensors.

Buffer Copy without Checking Size of Input in DSP Service

Memory corruption while passing pages to DSP with an unaligned starting address.

Improper Validation of Array Index in Automotive Linux OS

Memory corruption when accessing resources in kernel driver.

Buffer Copy Without Checking Size of Input in DSP Service

Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations.

Buffer Over-read in WLAN Firmware

Transient DOS while parsing a WLAN management frame with a Vendor Specific Information Element.

Double Free in Graphics

Memory corruption occurs when a secure application is launched on a device with insufficient memory.

Improper access control for volatile memory containing boot code in Universal Boot Loader (U-Boot) before 2017.11 and Qualcomm chips IPQ4019, IPQ5018, IPQ5322, IPQ6018, IPQ8064, IPQ8074, and IPQ9574 could allow an attacker to execute arbitrary code.

Dell Wireless 5932e and Qualcomm Snapdragon X62 Firmware and GNSS/GPS Driver, versions prior to 3.2.0.22 contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code Execution.

Untrusted Pointer Dereference in Video

Memory corruption while processing a video session to set video parameters.