Transient DOS while processing received beacon frame.
Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.
Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.
Memory corruption while retrieving the CBOR data from TA.
Memory corruption while processing video packets received from video firmware.
Transient DOS may occur while processing malformed length field in SSID IEs.
Memory corruption while reading secure file.
Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling.
Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions.
Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.
Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses.
Memory corruption while loading a VM from a signed VM image that is not coherent in the processor cache.
Memory corruption in Core Services while executing the command for removing a single event listener.
Memory Corruption in Audio while allocating the ion buffer during the music playback.
Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.
Memory Corruption in WLAN HOST while fetching TX status information.
Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.
Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.
Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.
Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization.
Memory corruption while configuring a Hypervisor based input virtual device.
Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame.
Memory corruption in Graphics while processing user packets for command submission.
Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony.
Memory corruption in Video while calling APIs with different instance ID than the one received in initialization.
Memory corruption in Linux while calling system configuration APIs.
The camgetdevicepriv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handle is passed to it.