CVE-2022-40516

Memory corruption in Core due to stack-based buffer overflow.

CVE-2022-33266

Memory corruption in Audio due to integer overflow to buffer overflow while music playback of clips like amr,evrc,qcelp with modified content.

CVE-2022-40518

Information disclosure due to buffer overread in Core

CVE-2022-40520

Memory corruption due to stack-based buffer overflow in Core

CVE-2022-22079

Denial of service while processing fastboot flash command on mmc due to buffer over read

CVE-2022-25715

Memory corruption in display driver due to incorrect type casting while accessing the fence structure fields

CVE-2022-25717

Memory corruption in display due to double free while allocating frame buffer memory

CVE-2022-40519

Information disclosure due to buffer overread in Core

CVE-2022-33299

Transient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protocol PDU with zero length data.

CVE-2022-33290

Transient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed.

CVE-2022-40517

Memory corruption in core due to stack-based buffer overflow

CVE-2022-25721

Memory corruption in video driver due to type confusion error during video playback