Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.
Transient DOS while processing DL NAS TRANSPORT message with payload length 0.
Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR.
Memory corruption in MPP performance while accessing DSM watermark using external memory address.
Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command.
Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked.
Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.
Memory corruption while processing event close when client process terminates abruptly.
Information disclosure in Audio while accessing AVCS services from ADSP payload.
Transient DOS while parsing per STA profile in ML IE.
Memory corruption while processing a private escape command in an event trigger.
Information Disclosure in Qualcomm IPC while reading values from shared memory in VM.
Memory corruption while processing audio effects.
Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan.
Memory corruption in Core when updating rollback version for TA and OTA feature is enabled.
Memory corruption when IPv6 prefix timer object`s lifetime expires which are created while Netmgr daemon gets an IPv6 address.
Memory corruption in TZ Secure OS while requesting a memory allocation from TA region.
Memory corruption in HLOS while running playready use-case.