Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE.
Memory corruption while calling the NPU driver APIs concurrently.
Memory corruption while handling multuple IOCTL calls from userspace for remote invocation.
Memory corruption in display driver while detaching a device.
Memory corruption may occur during the synchronization of the cameras frame processing pipeline.
Memory corruption may occur while validating ports and channels in Audio driver.
Memory corruption while processing IOCTL from user space to handle GPU AHB bus error.
Memory corruption while power-up or power-down sequence of the camera sensor.
Memory corruption can occur in the camera when an invalid CID is used.
Information disclosure while parsing the OCI IE with invalid length.
Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace.
Memory corruption in Camera due to unusually high number of nodes passed to AXI port.
Memory corruption while validating number of devices in Camera kernel .
Memory corruption while configuring a Hypervisor based input virtual device.
Memory corruption while invoking IOCTL calls from user-space to kernel-space to handle session errors.
Memory corruption while processing frame packets.
Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem.
Memory corruption while processing frame command IOCTL calls.
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.
Memory corruption when BTFM client sends new messages over Slimbus to ADSP.
Memory corruption while processing Codec2 during v13k decoder pitch synthesis.
Transient DOS while processing DL NAS Transport message when message ID is not defined in the 3GPP specification.
Transient DOS while processing CAG info IE received from NW.
Transient DOS while processing IE fragments from server during DTLS handshake.
Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake.