Use of Out-of-range Pointer Offset in Qualcomm IPC
Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.
Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.
Memory corruption in HLOS while checking for the storage type.
Memory corruption while verifying the serialized header when the key pairs are generated.
Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.
Memory corruption while processing MBSSID beacon containing several subelement IE.
Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point.
Memory corruption while processing IOCTL call for getting group info.
Transient DOS in Modem while triggering a camping on an 5G cell.
Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.
Memory Corruption in Audio while allocating the ion buffer during the music playback.
Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL.
Memory corruption while playing audio file having large-sized input buffer.
Memory corruption when the payload received from firmware is not as per the expected protocol size.
Memory corruption in Audio when memory map command is executed consecutively in ADSP.
Memory Corruption in Core during syscall for Sectools Fuse comparison feature.
Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVCS_LOAD_MODULE command.
Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length.
Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time.
Memory corruption while processing buffer initialization, when trusted report for certain report types are generated.