Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
Memory Corruption in Multi-mode Call Processor while processing bit mask API.
Memory corruption in TZ Secure OS while requesting a memory allocation from TA region.
Memory corruption in HLOS while running playready use-case.
Memory corruption in Core Services while executing the command for removing a single event listener.
Memory corruption due to double free in core while initializing the encryption key.
Memory corruption while loading an ELF segment in TEE Kernel.
Memory corruption in Audio during playback with speaker protection.
Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.
Memory corruption while performing finish HMAC operation when context is freed by keymaster.
Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table.
Memory corruption in Graphics while importing a file.
Memory corruption due to double free in Core while mapping HLOS address to the list.
Memory Corruption in Core due to secure memory access by user while loading modem image.
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.
Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.
Memory corruption during session sign renewal request calls in HLOS.
Memory corruption while processing voice packet with arbitrary data received from ADSP.
Memory corruption while processing GPU page table switch.
Memory corruption while parsing the memory map info in IOCTL calls.
Memory corruption while processing command in Glink linux.
Memory corruption while calling the NPU driver APIs concurrently.
Memory corruption may occur while validating ports and channels in Audio driver.
Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is exposed as shared memory.
Memory corruption during concurrent access to server info object due to incorrect reference count update.
Memory corruption may occur during IO configuration processing when the IO port count is invalid.
Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
Memory corruption while processing video packets received from video firmware.
Memory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently.