Transient DOS in Multi-Mode Call Processor while processing UE policy container.
Memory corruption in HLOS while converting from authorization token to HIDL vector.
Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.
Memory corruption in Audio while running invalid audio recording from ADSP.
Information disclosure in Video while parsing mp2 clip with invalid section length.
Transient DOS in WLAN Firmware while parsing no-inherit IES.
Memory corruption while invoking IOCTLs calls in Automotive Multimedia.
Memory corruption while using the UIM diag command to get the operators name.
Memory corruption when two threads try to map and unmap a single node simultaneously.
Transient DOS in WLAN Firmware while parsing rsn ies.
Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP.
Memory corruption in Core Services while executing the command for removing a single event listener.
Memory corruption when user provides data for FM HCI command control operations.
Memory corruption while processing event close when client process terminates abruptly.
Memory Corruption in WLAN Host while deserializing the input PMK bytes without checking the input PMK length.
Memory corruption in Audio while processing the calibration data returned from ACDB loader.
Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.
Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache.
Memory corruption in video while parsing invalid mp2 clip.