Transient DOS while processing CCCH data when NW sends data with invalid length.
Transient DOS in Bluetooth Host while rfc slot allocation.
Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application.
Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR.
Transient DOS while parsing WPA IES, when it is passed with length more than expected size.
Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level.
Memory corruption while processing MBSSID beacon containing several subelement IE.
Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.
Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16.
Information Disclosure in data Modem while parsing an FMTP line in an SDP message.
Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR.
Memory corruption while running VK synchronization with KASAN enabled.
Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers.
Transient DOS while parse fils IE with length equal to 1.
Memory corruption in Audio while running invalid audio recording from ADSP.
Memory corruption in Core Services while executing the command for removing a single event listener.
Memory corruption in wearables while processing data from AON.
Memory corruption in Core while processing control functions.
Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.