Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.
Memory corruption in TZ Secure OS while loading an app ELF.
Memory Corruption in WLAN HOST while fetching TX status information.
Memory corruption in SPS Application while requesting for public key in sorter TA.
Memory Corruption in Core due to secure memory access by user while loading modem image.
Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application.
Information Disclosure in data Modem while parsing an FMTP line in an SDP message.
Memory corruption when Alternative Frequency offset value is set to 255.
Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.
Memory corruption when user provides data for FM HCI command control operations.
Memory corruption while operating the mailbox in Automotive.
Memory corruption in MPP performance while accessing DSM watermark using external memory address.
Transient DOS in WLAN Firmware while parsing rsn ies.
Memory corruption while processing finish_sign command to pass a rsp buffer.
Transient DOS in Bluetooth Host while rfc slot allocation.
Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
Improper Access to the VM resource manager can lead to Memory Corruption.
Memory corruption when two threads try to map and unmap a single node simultaneously.