Use of Out-of-range Pointer Offset in Audio
Memory corruption in Audio during playback with speaker protection.
Memory corruption in Audio during playback with speaker protection.
Transient DOS while handling PS event when Program Service name length offset value is set to 255.
Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.
Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus.
Memory corruption in Graphics while processing user packets for command submission.
Transient DOS in WLAN Host when an invalid channel (like channel out of range) is received in STA during CSA IE.
Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel in CSA IE.
Memory corruption while processing GPU page table switch.
Memory corruption while processing voice packet with arbitrary data received from ADSP.