Memory corruption while triggering commands in the PlayReady Trusted application.
Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.
Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.
Transient DOS may occur while processing malformed length field in SSID IEs.
Memory corruption in Core Services while executing the command for removing a single event listener.
Memory corruption while processing finish_sign command to pass a rsp buffer.
Memory corruption in Audio while processing RT proxy port register driver.
Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.
Memory corruption while parsing qcp clip with invalid chunk data size.
Memory corruption when there is failed unmap operation in GPU.
Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.
Memory corruption when Alternative Frequency offset value is set to 255.
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.
Memory corruption when user provides data for FM HCI command control operations.
Memory corruption when two threads try to map and unmap a single node simultaneously.
Information disclosure while deriving keys for a session for any Widevine use case.
Transient DOS may occur while processing the country IE.
Transient DOS while processing received beacon frame.