Memory corruption during concurrent access to server info object due to unprotected critical field.
Memory corruption while operating the mailbox in Automotive.
Transient DOS may occur while processing the country IE.
Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.
Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.
Cryptographic issue occurs due to use of insecure connection method while downloading.
Transient DOS while processing received beacon frame.
Memory corruption while processing manipulated payload in video firmware.
Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
Memory corruption in Core when updating rollback version for TA and OTA feature is enabled.
Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data.
Memory corruption in HLOS while running playready use-case.
The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.
Memory corruption in Audio during playback with speaker protection.
Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART.
Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload.
Memory corruption in WLAN HAL while handling command through WMI interfaces.
Memory corruption while power-up or power-down sequence of the camera sensor.