Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.
Memory corruption in modem due to improper length check while copying into memory
Memory corruption in modem due to improper input validation while handling the incoming CoAP message
Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface
memory corruption in modem due to improper check while calculating size of serialized CoAP message
Memory correction in modem due to buffer overwrite during coap connection
Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received.
Memory Corruption in Multi-mode Call Processor while processing bit mask API.
Memory corruption in TZ Secure OS while requesting a memory allocation from TA region.
Memory corruption in HLOS while running playready use-case.
Memory corruption due to double free in core while initializing the encryption key.
Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.
Memory corruption in modem due to buffer overflow while processing a PPP packet
Memory corruption while loading an ELF segment in TEE Kernel.
Memory corruption in Audio during playback with speaker protection.
Memory corruption in Audio while processing RT proxy port register driver.
Memory corruption in SPS Application while requesting for public key in sorter TA.
Memory corruption while performing finish HMAC operation when context is freed by keymaster.
Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
Memory corruption in WLAN due to incorrect type cast while sending WMISCANSCHPRIOTBLCMDID message.
Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.
Memory corruption due to double free in Core while mapping HLOS address to the list.
Memory Corruption in Core due to secure memory access by user while loading modem image.
Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network.
Information disclosure due to buffer over-read in Modem while parsing DNS hostname.
Information disclosure in modem due to buffer over-read while processing response from DNS server
Information disclosure in modem due to buffer over-red while performing checksum of packet received
Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets.