CVE-2025-27044
Memory corruption while executing timestamp video decode command with large input values.
CVE-2025-21446
Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.
CVE-2025-21486
Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.
CVE-2025-21485
Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC.
CVE-2024-53018
Memory corruption may occur while processing the OIS packet parser.
CVE-2025-21462
Memory corruption while processing an IOCTL request, when buffer significantly exceeds the command argument limit.
CVE-2024-49829
Memory corruption can occur during context user dumps due to inadequate checks on buffer length.
CVE-2024-45579
Memory corruption may occur when invoking IOCTL calls from userspace to the camera kernel driver to dump request information, due to a missing memory requirement check.
CVE-2024-45578
Memory corruption while acquire and update IOCTLs during IFE output resource ID validation.
CVE-2024-45577
Memory corruption while invoking IOCTL calls from userspace to camera kernel driver to dump request information.
CVE-2024-45576
Memory corruption while prociesing command buffer buffer in OPE module.
CVE-2024-45575
Memory corruption Camera kernel when large number of devices are attached through userspace.
CVE-2024-45568
Memory corruption due to improper bounds check while command handling in camera-kernel driver.
CVE-2024-45567
Memory corruption while encoding JPEG format.
CVE-2024-45563
Memory corruption while handling schedule request in Camera Request Manager(CRM) due to invalid link count in the corresponding session.
CVE-2024-45554
Memory corruption during concurrent SSR execution due to race condition on the global maps list.
CVE-2025-21447
Memory corruption may occur while processing device IO control call for session control.
CVE-2024-45556
Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.
CVE-2024-43058
Memory corruption while processing IOCTL calls.
CVE-2024-53034
Memory corruption occurs during an Escape call if an invalid Kernel Mode CPU event and sync object handle are passed with the DriverKnownEscape flag reset.