Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake.
Memory corruption while processing Codec2 during v13k decoder pitch synthesis.
Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization.
Memory corruption when BTFM client sends new messages over Slimbus to ADSP.
Information disclosure while parsing the OCI IE with invalid length.
Memory corruption while processing frame command IOCTL calls.
Memory corruption while power-up or power-down sequence of the camera sensor.
Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace.
Memory corruption can occur in the camera when an invalid CID is used.
Memory corruption while validating number of devices in Camera kernel .
Memory corruption in display driver while detaching a device.
Memory corruption while calling the NPU driver APIs concurrently.
Memory corruption may occur while validating ports and channels in Audio driver.
Transient DOS while processing CAG info IE received from NW.
Transient DOS while processing IE fragments from server during DTLS handshake.
Transient DOS while processing DL NAS Transport message when message ID is not defined in the 3GPP specification.
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.