Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.
Memory corruption when processing draw objects of incorrect type during graphics command list execution.
Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.
Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.
Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.
Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.
Memory corruption while using alignments for memory allocation.
Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow.
Memory corruption while processing fastboot commands with invalid input.
Memory Corruption when processing display command line information due to improper initialization of a variable.
Memory corruption while processing fastboot OEM commands.
Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.
Memory corruption while processing fastboot commands with improperly formatted input.
Memory Corruption when processing fastboot commands to set display mode.
Cryptographic Issue while processing registration requests with malformed or missing authentication parameters.
Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.
Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities.
Transient DOS when processing authentication frames with invalid FILS information element header lengths.
Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.
Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling.
Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.
Memory corruption while processing identity credential operations in the trusted application.
Memory corruption when decoding corrupted satellite data files with invalid signature offsets.
Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.
Transient DOS when processing target power rate tables during channel configuration.
Memory Corruption when processing device identifier strings that exceed the expected maximum length.
Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.
Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.
Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.
Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.