Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake.
Memory corruption while processing Codec2 during v13k decoder pitch synthesis.
Memory corruption while configuring a Hypervisor based input virtual device.
Memory corruption when BTFM client sends new messages over Slimbus to ADSP.
Information disclosure while parsing the OCI IE with invalid length.
Memory corruption while processing frame command IOCTL calls.
Memory corruption while processing IOCTL from user space to handle GPU AHB bus error.
Memory corruption while power-up or power-down sequence of the camera sensor.
Memory corruption while invoking IOCTL calls from user-space to kernel-space to handle session errors.
Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace.
Memory corruption can occur in the camera when an invalid CID is used.
Memory corruption in Camera due to unusually high number of nodes passed to AXI port.
Memory corruption while processing frame packets.
Memory corruption while validating number of devices in Camera kernel .
Memory corruption in display driver while detaching a device.
Memory corruption may occur during the synchronization of the cameras frame processing pipeline.
Memory corruption while handling multuple IOCTL calls from userspace for remote invocation.
Memory corruption while calling the NPU driver APIs concurrently.
Memory corruption may occur while validating ports and channels in Audio driver.
Transient DOS while processing CAG info IE received from NW.
Transient DOS while processing IE fragments from server during DTLS handshake.
Transient DOS while processing DL NAS Transport message when message ID is not defined in the 3GPP specification.
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.
Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem.
Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE.