Information Disclosure in Qualcomm IPC while reading values from shared memory in VM.
Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager.
Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.
Memory corruption in MPP performance while accessing DSM watermark using external memory address.
Transient DOS in Modem while triggering a camping on an 5G cell.
Transient DOS in WLAN Firmware while parsing a BTM request.
Transient DOS in Multi-Mode Call Processor while processing UE policy container.
Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage.
Memory corruption in TZ Secure OS while loading an app ELF.
Transient DOS in Audio when invoking callback function of ASM driver.
Information disclosure in Audio while accessing AVCS services from ADSP payload.
Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points.
Memory corruption in Audio while processing IIR config data from AFE calibration block.
Memory corruption in Audio while processing the calibration data returned from ACDB loader.
Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.
Memory corruption in Core while processing control functions.
Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.
Memory corruption when processing cmd parameters while parsing vdev.