Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location.
Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
Memory corruption while processing concurrent IOCTL calls.
Memory corruption in wearables while processing data from AON.
Transient DOS in WLAN Firmware while parsing rsn ies.
While processing the authentication message in UE, improper authentication may lead to information disclosure.
Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.
Memory corruption in WLAN Firmware while doing a memory copy of pmk cache.
Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time.
Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data.
Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.
Memory corruption while using the UIM diag command to get the operators name.
Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
Transient DOS in Multi-Mode Call Processor while processing UE policy container.
Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.
Transient DOS in Automotive OS due to improper authentication to the secure IO calls.
Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR.
Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage.
Memory corruption when two threads try to map and unmap a single node simultaneously.