In dismiss and related functions of KeyguardHostViewController.java and related files, there is a possible lockscreen bypass due to a logic error in the code. This…

In MMU_UnmapPages of the PowerVR kernel driver, there is a possible out of bounds write due to a missing bounds check. This could lead to…

In _PMRLogicalOffsetToPhysicalOffset of the PowerVR kernel driver, there is a possible out of bounds write due to a missing bounds check. This could lead to…

In ccd, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with System execution…

In isp, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with System execution…

In typec, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to local escalation of…

In typec, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to local escalation of…

In vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution…

In vcu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges…

In audio, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution privileges…