Memory Corruption in Core Platform while printing the response buffer in log.
Memory corruption in Core Platform while printing the response buffer in log.
Transient DOS in Modem while processing invalid System Information Block 1.
Memory corruption in WLAN due to incorrect type cast while sending WMISCANSCHPRIOTBLCMDID message.
Memory corruption in Bluetooth HOST while processing the AVRCPDUGETPLAYERAPPVALUETEXT AVRCP response.
Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE handover.
Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.
Transient DOS due to reachable assertion in Modem while processing SIB1 Message.
Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response
Memory corruption due to improper validation of array index in Multi-mode call processor.
Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity.
Memory corruption in modem due to buffer overflow while processing a PPP packet
Transient DOS in modem due to reachable assertion.
Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.
Information Disclosure in Graphics during GPU context switch.
Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD.
Transient DOS due to reachable assertion in modem during MIB reception and SIB timeout
Information disclosure due to buffer over-read in WLAN while parsing NMF frame.
Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.
Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.
Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.
Transient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs.
Information disclosure due to buffer overread in Core
Memory corruption in core due to stack-based buffer overflow
Memory corruption in Core due to stack-based buffer overflow.
Information disclosure due to buffer over-read in WLAN while parsing BTM action frame.
Memory corruption due to buffer copy without checking size of input in modem while receiving WMIREQUESTSTATSCMDID command.
Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check.
Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.