Memory Corruption in Core during syscall for Sectools Fuse comparison feature.
Memory corruption while processing buffer initialization, when trusted report for certain report types are generated.
Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.
Memory corruption in MPP performance while accessing DSM watermark using external memory address.
Memory corruption in Audio while processing the calibration data returned from ACDB loader.
Memory corruption in Audio while processing IIR config data from AFE calibration block.
Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points.
Memory corruption in Audio while processing RT proxy port register driver.
Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.
Memory corruption in Core while processing control functions.
Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size.
Memory corruption while running VK synchronization with KASAN enabled.
Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR.
Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16.
Transient DOS while parsing WPA IES, when it is passed with length more than expected size.
Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR.
Transient DOS in Modem while triggering a camping on an 5G cell.
Transient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element.