Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call.
Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.
Memory corruption in Core Services while executing the command for removing a single event listener.
Memory corruption in Audio during playback with speaker protection.
Memory corruption as GPU registers beyond the last protected range can be accessed through LPAC submissions.
Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and reclaiming of memory buffers are performed at the same time.
Memory corruption while processing IOCTL call to set metainfo.
Memory corruption while creating a fence to wait on timeline events, and simultaneously signal timeline events.
Memory corruption while allocating memory in HGSL driver.
Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released.
Memory corruption in Graphics while processing user packets for command submission.
Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions.
Memory Corruption in Audio while allocating the ion buffer during the music playback.
Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.
The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.
Memory corruption while receiving a message in Bus Socket Transport Server.
Memory corruption while maintaining memory maps of HLOS memory.
Memory corruption while handling session errors from firmware.
Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.
Memory corruption while processing voice packet with arbitrary data received from ADSP.
Memory corruption while processing GPU page table switch.
Memory corruption when invalid input is passed to invoke GPU Headroom API call.
Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it for a process-specific task, issues may arise.
Memory corruption may occur while accessing a variable during extended back to back tests.
Memory corruption while reading secure file.
Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.
Memory corruption while reading the FW response from the shared queue.
Memory corruption in WLAN HAL while passing command parameters through WMI interfaces.
Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers.
Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload.