Memory corruption in Audio during playback with speaker protection.
Memory corruption due to improper validation of array index in Multi-mode call processor.
Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
Memory corruption in modem due to use of out of range pointer offset while processing qmi msg
Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region.
Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers.
Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload.
Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload.
Memory corruption in WLAN HAL while passing command parameters through WMI interfaces.
Memory corruption in WLAN HAL while handling command streams through WMI interfaces.
Memory corruption in WLAN HAL while handling command through WMI interfaces.
Information disclosure while parsing the OCI IE with invalid length.
Memory corruption while processing IOCTL from user space to handle GPU AHB bus error.
Memory corruption while power-up or power-down sequence of the camera sensor.
Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace.
Memory corruption while processing Codec2 during v13k decoder pitch synthesis.
Transient DOS while handling PS event when Program Service name length offset value is set to 255.
Memory corruption when invalid input is passed to invoke GPU Headroom API call.
Memory corruption when allocating and accessing an entry in an SMEM partition continuously.