An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4nat'
Information disclosure possible while audio playback.
Information disclosure due to uninitialized variable.
Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW
On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder.
Certain unprivileged processes are able to perform IOCTL calls.
Memory corruption while unmapping the fastrpc map when two threads can free the same map in concurrent scenario.
Transient DOS during music playback of ALAC content.
Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM.
Information disclosure in WLAN HAL when reception status handler is called.
Memory corruption in WLAN HAL while handling command through WMI interfaces.
Memory corruption in WLAN HAL while handling command streams through WMI interfaces.
Memory corruption in WLAN HAL while passing command parameters through WMI interfaces.
Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement (CSA).
Memory corruption in Graphics while processing user packets for command submission.
Information disclosure in Network Services due to buffer over-read while the device receives DNS response.
Memory Corruption in Audio while allocating the ion buffer during the music playback.
Memory corruption in Linux while calling system configuration APIs.
Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.
Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.
Information disclosure in DSP Services while loading dynamic module.
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data.
Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message.
Memory Corruption in WLAN HOST while parsing QMI response message from firmware.
Memory Corruption in WLAN HOST while fetching TX status information.
Memory corruption in Linux android due to double free while calling unregister provider after register call.
Memory corruption due to use after free in Modem while modem initialization.
Information disclosure due to buffer overread in Linux sensors
Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message.
Information disclosure due to buffer overread in Core