Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities.
Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling.
Transient DOS when MAC configures config id greater than supported maximum value.
Memory corruption when decoding corrupted satellite data files with invalid signature offsets.
Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call.
Transient DOS in Data Modem during DTLS handshake.
Memory corruption in HLOS while running playready use-case.
Memory corruption in Audio during playback with speaker protection.
Memory corruption in Core while processing control functions.
Transient DOS in Multi-Mode Call Processor while processing UE policy container.
Memory corruption in Core when updating rollback version for TA and OTA feature is enabled.
Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage.
Transient DOS while processing PDU Release command with a parameter PDU ID out of range.
Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16.
Memory corruption in Core Services while executing the command for removing a single event listener.
Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR.
Memory corruption while processing buffer initialization, when trusted report for certain report types are generated.
Transient DOS while processing DL NAS TRANSPORT message with payload length 0.
Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR.
Memory corruption while loading a VM from a signed VM image that is not coherent in the processor cache.
Memory corruption in HLOS while checking for the storage type.
Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received.
Transient DOS due to reachable assertion in Modem during OSI decode scheduling.
Memory corruption while copying a keyblobs material when the key materials size is not accurately checked.
Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization.
Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.
Memory corruption in Hypervisor when platform information mentioned is not aligned.
Transient DOS while loading the TA ELF file.
Memory corruption while processing key blob passed by the user.
Memory corruption when an invoke call and a TEE call are bound for the same trusted application.