Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.
Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.
Memory corruption while handling payloads from remote ESL.
Memory corruption in WLAN HAL while passing command parameters through WMI interfaces.
Memory corruption in WLAN HAL while handling command streams through WMI interfaces.
Memory corruption in WLAN HAL while handling command through WMI interfaces.
Memory corruption while taking a snapshot with hardware encoder due to unvalidated userspace buffer.
Memory corruption while handling IOCTL call from user-space to set latency level.
Memory corruption while configuring a Hypervisor based input virtual device.
Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization.
Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame.
Memory corruption while allocating memory for graphics.
Memory corruption while invoking the SubmitCommands call on Gfx engine during the graphics render.
Memory corruption due to double free in Core while mapping HLOS address to the list.
Memory corruption when an invoke call and a TEE call are bound for the same trusted application.
Memory corruption while processing key blob passed by the user.
Memory corruption while performing finish HMAC operation when context is freed by keymaster.
Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast.