Memory corruption while processing fastboot commands with improperly formatted input.
Memory Corruption when processing display command line information due to improper initialization of a variable.
Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.
Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.
Memory corruption while handling buffer mapping operations in the cryptographic driver.
Memory corruption while processing MFC channel configuration during music playback.
Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.
Memory corruption during PlayReady APP usecase while processing TA commands.
Transient DOS while parsing the EPTM test control message to get the test pattern.
Cryptographic issue while performing RSA PKCS padding decoding.
Transient DOS while processing an ANQP message.
Information disclosure while processing the hash segment in an MBN file.
Information disclosure while reading data from an image using specified offset and size parameters.
Transient DOS while processing received beacon frame.
Transient DOS may occur while processing malformed length field in SSID IEs.
Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.
Transient DOS may occur while parsing SSID in action frames.
Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.
Memory corruption while handling file descriptor during listener registration/de-registration.
Memory corruption while parsing the memory map info in IOCTL calls.
Memory corruption while Configuring the SMR/S2CR register in Bypass mode.
Memory corruption while processing voice packet with arbitrary data received from ADSP.
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
Memory corruption while processing GPU page table switch.
memory corruption when an invalid firehose patch command is invoked.
Information disclosure while handling beacon or probe response frame in STA.
Transient DOS while decoding attach reject message received by UE, when IEI is set to ESMIEI.
Transient DOS while parsing ESP IE from beacon/probe response frame.
Transient DOS while loading the TA ELF file.