Transient DOS while processing channel information for speaker protection v2 module in ADSP.
Information disclosure when VI calibration state set by ADSP is greater than MAXFBSPSTATE in the response payload to AFE calibration command.
Memory corruption when there is failed unmap operation in GPU.
Memory corruption when the bandpass filter order received from AHAL is not within the expected range.
Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.
Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size.
Memory corruption when the payload received from firmware is not as per the expected protocol size.
Memory corruption when two threads try to map and unmap a single node simultaneously.
Memory corruption when user provides data for FM HCI command control operations.
Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame.
Memory corruption while maintaining memory maps of HLOS memory.
Information disclosure while parsing the OCI IE with invalid length.
Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.
Memory corruption while reading the FW response from the shared queue.
Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
Memory corruption while processing video packets received from video firmware.
Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.
Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers.
Transient DOS while processing PDU Release command with a parameter PDU ID out of range.
Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16.
Memory corruption in Audio while processing RT proxy port register driver.
Memory corruption while processing TPC target power table in FTM TPC.
Transient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame.
Memory corruption in Core Services while executing the command for removing a single event listener.
Memory corruption while parsing qcp clip with invalid chunk data size.
Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR.
Memory corruption while processing buffer initialization, when trusted report for certain report types are generated.
Memory corruption in SPS Application while requesting for public key in sorter TA.
Transient DOS while processing DL NAS TRANSPORT message with payload length 0.
Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR.