Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass.
Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.
memory corruption when an invalid firehose patch command is invoked.
Memory corruption while processing video packets received from video firmware.
Memory corruption in Audio while processing RT proxy port register driver.
Transient DOS while parse fils IE with length equal to 1.
Transient DOS in WLAN Firmware while parsing a BTM request.
Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.
Memory corruption in SPS Application while requesting for public key in sorter TA.
Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.
Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.
Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.
Memory corruption while processing finish_sign command to pass a rsp buffer.
Memory Corruption in Core due to secure memory access by user while loading modem image.
Memory corruption when the payload received from firmware is not as per the expected protocol size.
Memory corruption when user provides data for FM HCI command control operations.
Transient DOS in Bluetooth Host while rfc slot allocation.