Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.
Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.
Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.
Transient DOS while parsing the EPTM test control message to get the test pattern.
Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.
Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.
Memory corruption during PlayReady APP usecase while processing TA commands.
Memory corruption while processing a GP command response.
Memory corruption while using alignments for memory allocation.
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.
Memory Corruption in SPS Application while exporting public key in sorter TA.
Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.
Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesnt adhere to RFC standards.
Memory corruption while handling file descriptor during listener registration/de-registration.
Memory corruption while processing MFC channel configuration during music playback.
Memory Corruption in Multi-mode Call Processor while processing bit mask API.
Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
Information Disclosure in data Modem while parsing an FMTP line in an SDP message.
Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.
Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains IPPROTONONE as the next header.
Information disclosure in IOE Firmware while handling WMI command.
Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.
Memory corruption in MPP performance while accessing DSM watermark using external memory address.
Memory corruption while processing voice packet with arbitrary data received from ADSP.
Memory corruption while processing GPU page table switch.
Memory corruption in HLOS while running playready use-case.
The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.