CVE-2017-11076

On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder.

CVE-2018-11922

Wrong configuration in Touch Pal application can collect user behavior data without awareness by the user.