Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Radio Interface Layer
Memory corruption while sending SMS from AP firmware.
Memory corruption while sending SMS from AP firmware.
Memory corruption in Audio while processing the VOC packet data from ADSP.
Memory corruption in DSP Services during a remote call from HLOS to DSP.
Memory corruption while using the UIM diag command to get the operators name.
Transient DOS in WLAN Firmware while parsing rsn ies.
Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.
Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data.
Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan.
Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.
Memory corruption while allocating memory in COmxApeDec module in Audio.
Memory corruption due to double free in core while initializing the encryption key.