Memory corruption while parsing the ML IE due to invalid frame content.
Memory corruption during management frame processing due to mismatch in T2LM info element.
Memory corruption while selecting the PLMN from SOR failed list.
Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
Memory corruption while decoding of OTA messages from T3448 IE.
Cryptographic issue occurs due to use of insecure connection method while downloading.
Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
Cryptographic issue may occur while encrypting license data.
Information disclosure while parsing the OCI IE with invalid length.
Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.
Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.
Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.
Information disclosure may occur due to improper permission and access controls to Video Analytics engine.
Memory corruption while handling session errors from firmware.
Memory corruption during GNSS HAL process initialization.
Memory corruption while processing GPU commands.
Memory corruption while processing API calls to NPU with invalid input.
Memory corruption when invalid input is passed to invoke GPU Headroom API call.
Memory corruption may occour occur when stopping the WLAN interface after processing a WMI command from the interface.
Memory corruption while processing IOCTL from user space to handle GPU AHB bus error.
Memory corruption while power-up or power-down sequence of the camera sensor.
Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace.
Memory corruption can occur in the camera when an invalid CID is used.
Memory corruption in Camera due to unusually high number of nodes passed to AXI port.
Memory corruption in display driver while detaching a device.
Memory corruption may occur during the synchronization of the cameras frame processing pipeline.
Memory corruption while handling multuple IOCTL calls from userspace for remote invocation.
Memory corruption may occur while validating ports and channels in Audio driver.
Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads.