Memory corruption in SPS Application while requesting for public key in sorter TA.
Information disclosure in Video while parsing mp2 clip with invalid section length.
Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,
Transient DOS in Bluetooth Host while rfc slot allocation.
Memory corruption in wearables while processing data from AON.
Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers.
Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.
Transient DOS in Modem while triggering a camping on an 5G cell.
Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.
Transient DOS when processing a NULL buffer while parsing WLAN vdev.
Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message.
Memory Corruption in WLAN HOST while parsing QMI response message from firmware.
Memory corruption in Core while processing RX intent request.
Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application.
Memory Corruption in Core due to secure memory access by user while loading modem image.
Information Disclosure in data Modem while parsing an FMTP line in an SDP message.
Memory corruption in TZ Secure OS while loading an app ELF.
Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length.