Memory corruption while parsing the ML IE due to invalid frame content.
Memory corruption during management frame processing due to mismatch in T2LM info element.
Memory corruption while selecting the PLMN from SOR failed list.
Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
Memory corruption while decoding of OTA messages from T3448 IE.
Cryptographic issue occurs due to use of insecure connection method while downloading.
Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
Cryptographic issue may occur while encrypting license data.
Information disclosure while parsing the OCI IE with invalid length.
Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.
Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources.
Information disclosure may occur while processing goodbye RTCP packet from network.
Information disclosure may occur while decoding the RTP packet with invalid header extension from network.
Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.
Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.
Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.
Information disclosure may occur due to improper permission and access controls to Video Analytics engine.
Memory corruption when Alternative Frequency offset value is set to 255.
Memory corruption when user provides data for FM HCI command control operations.
Memory corruption while handling session errors from firmware.
Memory corruption during GNSS HAL process initialization.
Memory corruption while processing GPU commands.
Memory corruption while processing API calls to NPU with invalid input.
Memory corruption when invalid input is passed to invoke GPU Headroom API call.
Memory corruption may occour occur when stopping the WLAN interface after processing a WMI command from the interface.
Memory corruption while processing IOCTL from user space to handle GPU AHB bus error.
Memory corruption while power-up or power-down sequence of the camera sensor.
Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace.
Memory corruption can occur in the camera when an invalid CID is used.