Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application.
Memory Corruption in Core due to secure memory access by user while loading modem image.
Memory corruption in SPS Application while requesting for public key in sorter TA.
Memory corruption in TZ Secure OS while loading an app ELF.
Memory corruption in MPP performance while accessing DSM watermark using external memory address.
Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.
Memory corruption in Core Services while executing the command for removing a single event listener.
Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.
Memory corruption in HLOS while invoking IOCTL calls from user-space.
Memory corruption while processing finish_sign command to pass a rsp buffer.
Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.
Memory corruption in DSP Service during a remote call from HLOS to DSP.
Memory corruption in Core while processing control functions.
Transient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element.
Memory corruption when resource manager sends the host kernel a reply message with multiple fragments.
Memory corruption while processing buffer initialization, when trusted report for certain report types are generated.
Memory corruption while processing a QMI request for allocating memory from a DHMS supported subsystem.
Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.