Buffer Over-read in WLAN Firmware
Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.
Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.
Memory corruption while processing a QMI request for allocating memory from a DHMS supported subsystem.
Memory corruption in Audio when memory map command is executed consecutively in ADSP.
Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.
Transient DOS while parsing probe response and assoc response frame.
Memory Corruption in WLAN HOST while fetching TX status information.
Transient DOS during hypervisor virtual I/O operation in a virtual machine.
Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.
Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.
Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.
Transient DOS when processing a NULL buffer while parsing WLAN vdev.
Memory Corruption in Audio while allocating the ion buffer during the music playback.
Memory corruption while processing IOCTL call for getting group info.
Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL.
Memory corruption when resource manager sends the host kernel a reply message with multiple fragments.
Memory corruption while processing buffer initialization, when trusted report for certain report types are generated.
Transient DOS in Bluetooth Host while rfc slot allocation.
Memory corruption when two threads try to map and unmap a single node simultaneously.
Memory corruption in HLOS while invoking IOCTL calls from user-space.