Memory corruption while processing finish_sign command to pass a rsp buffer.
Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.
Memory corruption in video while parsing invalid mp2 clip.
Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size.
Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.
Information disclosure in Audio while accessing AVCS services from ADSP payload.
Transient DOS in WLAN Firmware while parsing a BTM request.
Memory corruption in Audio while processing the calibration data returned from ACDB loader.
Transient DOS in Automotive OS due to improper authentication to the secure IO calls.
Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size.
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data.
Memory corruption in TZ Secure OS while loading an app ELF.
Memory corruption in Core Services while executing the command for removing a single event listener.
Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.
Memory Corruption in WLAN HOST while fetching TX status information.
Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size.
Memory corruption in HLOS while checking for the storage type.
Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager.
Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.