Memory corruption while processing a GP command response.
Memory corruption during PlayReady APP usecase while processing TA commands.
Cryptographic issue while performing RSA PKCS padding decoding.
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.
Memory corruption while handling file descriptor during listener registration/de-registration.
Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4nat'
Certain unprivileged processes are able to perform IOCTL calls.
Memory corruption while processing voice packet with arbitrary data received from ADSP.
Memory corruption while processing GPU page table switch.
Transient DOS while parsing ESP IE from beacon/probe response frame.
Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.
Memory corruption when allocating and accessing an entry in an SMEM partition.
Memory corruption while performing finish HMAC operation when context is freed by keymaster.
Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains IPPROTONONE as the next header.
Memory corruption in Audio during playback with speaker protection.
Memory corruption in HLOS while running playready use-case.
Memory corruption in DSP Services during a remote call from HLOS to DSP.
Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
Memory Corruption in SPS Application while exporting public key in sorter TA.
Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.
Information disclosure in IOE Firmware while handling WMI command.
Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.
Memory corruption in Audio while processing the VOC packet data from ADSP.
Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan.
Information Disclosure in data Modem while parsing an FMTP line in an SDP message.
Memory corruption while invoking callback function of AFE from ADSP.
Transient DOS in WLAN Host when an invalid channel (like channel out of range) is received in STA during CSA IE.