Memory corruption in Automotive Multimedia due to improper access control in HAB.
Memory corruption while handling client exceptions, allowing unauthorized channel access.
Memory Corruption in Core while invoking a call to Access Control core library with hardware protected address range.
Memory corruption while processing image encoding, when input buffer length is 0 in IOCTL call.
Memory corruption may occur due top improper access control in HAB process.
Memory corruption while processing image encoding, when configuration is NULL in IOCTL parameter.
Improper Access to the VM resource manager can lead to Memory Corruption.
Memory corruption in HAB Memory management due to broad system privileges via physical address.
Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode.
Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions.
Memory corruption in Automotive Android OS due to improper validation of array index.
Memory corruption due to improper access control in kernel while processing a mapping request from root process.
QSEE will randomly experience a fatal error during execution due to speculative instruction fetches from device memory. Device memory is not valid executable memory.
Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table.
Memory corruption while creating a LPAC client as LPAC engine was allowed to access GPU registers.
Memory corruption as GPU registers beyond the last protected range can be accessed through LPAC submissions.
Memory corruption in Automotive OS whenever untrusted apps try to access HAb for graphics functionalities.
Memory corruption due to improper access control in Qualcomm IPC.
Memory corruption while processing data sent by FE driver.
Memory corruption while deinitializing a HDCP session.
Memory corruption while calculating offset from partition start point.
Memory corruption while loading an invalid firmware in boot loader.
Memory Corruption when accessing buffers with invalid length during TA invocation.
Memory corruption when processing camera sensor input/output control codes with invalid output buffers.
Memory corruption while preprocessing IOCTL request in JPEG driver.
Memory corruption while processing a secure logging command in the trusted application.
Memory corruption while processing client message during device management.
Memory corruption while processing user buffers.
Memory corruption while allocating buffers in DSP service.
Memory corruption while processing a video session to set video parameters.
Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.
Memory corruption while invoking remote procedure IOCTL calls.
Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.
Memory Corruption when accessing trusted execution environment without proper privilege check.
Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources.
Memory corruption while processing escape commands from userspace.
Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.
Memory corruption while handling concurrent memory mapping and unmapping requests from a user-space application.
Memory corruption due to global buffer overflow when a test command uses an invalid payload type.
Memory corruption when triggering a subsystem crash with an out-of-range identifier.
memory corruption while processing an image encoding completion event.
Memory corruption while handling repeated memory unmap requests from guest VM.
Memory corruption while processing an escape call.
Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.
Memory corruption while processing audio streaming operations.
Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing.
Memory corruption while processing request sent from GVM.
Memory corruption when accessing resources in kernel driver.
Memory corruption while passing pages to DSP with an unaligned starting address.
Memory Corruption while processing IOCTL calls when concurrent access to shared buffer occurs.