Memory corruption while configuring a Hypervisor based input virtual device.
Memory corruption while Configuring the SMR/S2CR register in Bypass mode.
Memory corruption while handling session errors from firmware.
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus.
Memory corruption when keymaster operation imports a shared key.
Memory corruption while creating a fence to wait on timeline events, and simultaneously signal timeline events.
Memory corruption during session sign renewal request calls in HLOS.
Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.
Memory corruption while processing key blob passed by the user.
Memory corruption while performing finish HMAC operation when context is freed by keymaster.
Memory corruption when an invoke call and a TEE call are bound for the same trusted application.
Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization.
Memory corruption in Core when updating rollback version for TA and OTA feature is enabled.
Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data.
Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call.
Memory corruption in DSP Services during a remote call from HLOS to DSP.
Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.
Transient DOS in WLAN Firmware while parsing no-inherit IES.
Memory Corruption in Audio while invoking callback function in driver from ADSP.
Memory corruption in Audio while processing the VOC packet data from ADSP.
Transient DOS in WLAN Firmware while parsing a NAN management frame.
Cryptographic issue in Data Modem due to improper authentication during TLS handshake.
Transient DOS in WLAN Firmware while parsing rsn ies.
Memory corruption in DSP Service during a remote call from HLOS to DSP.
Memory corruption while invoking callback function of AFE from ADSP.
Memory corruption while parsing the ADSP response command.
Memory corruption in WLAN handler while processing PhyID in Tx status handler.
Memory corruption due to improper validation of array index in WLAN HAL when received lmitemNum is out of range.
Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame.