Use of Out-of-range Pointer Offset in Audio
Memory corruption in Audio during playback with speaker protection.
Memory corruption in Audio during playback with speaker protection.
Memory corruption while processing API calls to NPU with invalid input.
Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.
Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus.
Memory corruption while performing finish HMAC operation when context is freed by keymaster.
Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message.
information disclosure due to cryptographic issue in Core during RPMB read request.
Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.