Memory corruption while parsing clock configuration data for a specific hardware type.
Memory corruption while handling sensor utility operations.
Memory corruption while accessing a synchronization object during concurrent operations.
Memory corruption while processing a secure logging command in the trusted application.
Memory corruption while handling buffer mapping operations in the cryptographic driver.
Cryptographic issue may occur while encrypting license data.
Memory corruption while processing shared command buffer packet between camera userspace and kernel.
Transient DOS while parsing video packets received from the video firmware.
Memory corruption while processing a video session to set video parameters.
Information disclosure while processing a firmware event.
Memory corruption when decoding corrupted satellite data files with invalid signature offsets.
Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.
Memory corruption while processing a frame request from user.
Memory corruption while preprocessing IOCTL request in JPEG driver.
Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.
Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.
Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.
Transient DOS when processing target power rate tables during channel configuration.
Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input due to accessing already freed memory.
Memory Corruption when invoking device input/output control operations for mapping and unmapping persistent memory buffers due to improper synchronization.
Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input.
Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.
Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.
Information disclosure while running video usecase having rogue firmware.
Information disclosure when Video engine escape input data is less than expected minimum size.
Transient DOS when processing authentication frames with invalid FILS information element header lengths.
Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.
Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations.
Memory corruption while processing rear sensor IOCTL calls.
Memory corruption when processing escape handling flow with insufficient user buffer sizes.