Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than expected size.
Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.
Memory corruption while handling user packets during VBO bind operation.
Memory corruption when an invoke call and a TEE call are bound for the same trusted application.
Memory corruption during the secure boot process, when the `bootm` command is used, it bypasses the authentication of the kernel/rootfs image.
Memory corruption when allocating and accessing an entry in an SMEM partition.
Information disclosure while parsing sub-IE length during new IE generation.
Memory corruption while performing finish HMAC operation when context is freed by keymaster.
Memory corruption while processing key blob passed by the user.
Information disclosure when ASLR relocates the IMEM and Secure DDR portions as one chunk in virtual address space.
Transient DOS while loading the TA ELF file.
Information Disclosure while parsing beacon frame in STA.
Memory corruption while processing IOCTL handler in FastRPC.
INformation disclosure while handling Multi-link IE in beacon frame.
Information disclosure while handling SA query action frame.
Memory corruption while creating a LPAC client as LPAC engine was allowed to access GPU registers.
Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame.
Memory corruption in Hypervisor when platform information mentioned is not aligned.
Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Secur…
Information disclosure in Video while parsing mp2 clip with invalid section length.
transient DOS when setting up a fence callback to free a KGSL memory entry object during DMA.
Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked.
Memory corruption when IPC callback handle is used after it has been released during register callback by another thread.
Memory corruption when more scan frequency list or channels are sent from the user space.
Memory corruption in Audio during a playback or a recording due to race condition between allocation and deallocation of graph object.
Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization.
Information disclosure while handling T2LM Action Frame in WLAN Host.
Memory corruption while playing audio file having large-sized input buffer.
Memory corruption when the channel ID passed by user is not validated and further used.
Memory corruption as GPU registers beyond the last protected range can be accessed through LPAC submissions.