Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.
Memory corruption when the payload received from firmware is not as per the expected protocol size.
Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.
Memory corruption during concurrent access to server info object due to unprotected critical field.
Memory corruption in Audio while processing the calibration data returned from ACDB loader.
Memory Corruption in Audio while allocating the ion buffer during the music playback.
Memory corruption while using the UIM diag command to get the operators name.
Transient DOS during hypervisor virtual I/O operation in a virtual machine.
Transient DOS in Bluetooth Host while rfc slot allocation.
Memory corruption in wearables while processing data from AON.
Memory Corruption in camera while installing a fd for a particular DMA buffer.
Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache.
Memory corruption while parsing qcp clip with invalid chunk data size.
Memory corruption when there is failed unmap operation in GPU.
Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.
Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size.
Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size.
Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.
Memory corruption in SPS Application while requesting for public key in sorter TA.