Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.
Memory corruption during the handshake between the Primary Virtual Machine and Trusted Virtual Machine.
Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
Memory corruption while registering a buffer from user-space to kernel-space using IOCTL calls.
Memory corruption in MPP performance while accessing DSM watermark using external memory address.
Transient DOS when processing a NULL buffer while parsing WLAN vdev.
Transient DOS in Multi-Mode Call Processor while processing UE policy container.
Memory corruption when the IOCTL call is interrupted by a signal.
Memory corruption while passing untrusted/corrupted pointers from DSP to EVA.
Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage.
Memory corruption while playing audio file having large-sized input buffer.
Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager.
Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.
Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.
Memory corruption when the payload received from firmware is not as per the expected protocol size.
Memory corruption while invoking IOCTLs calls in Automotive Multimedia.
Transient DOS in WLAN Firmware while parsing no-inherit IES.