Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.
Memory corruption in Core Services while executing the command for removing a single event listener.
Cryptographic issue occurs due to use of insecure connection method while downloading.
Memory corruption in Graphics while processing user packets for command submission.
Memory Corruption in Audio while allocating the ion buffer during the music playback.
Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.
Memory corruption while reading secure file.
Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer.
Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.
Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
Memory corruption while retrieving the CBOR data from TA.
Memory corruption while processing video packets received from video firmware.
Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.
Memory Corruption in WLAN HOST while fetching TX status information.
Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.
Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame.
Transient DOS while processing received beacon frame.
Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.
Transient DOS may occur while processing malformed length field in SSID IEs.
Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.
Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.
Information disclosure in DSP Services while loading dynamic module.