Transient DOS while processing received beacon frame.
Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.
Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.
Memory corruption while retrieving the CBOR data from TA.
Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.
Memory corruption while processing video packets received from video firmware.
Transient DOS may occur while processing malformed length field in SSID IEs.
Memory corruption while maintaining memory maps of HLOS memory.
Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.
Memory corruption during concurrent buffer access due to modification of the reference count.
Memory corruption during concurrent access to server info object due to incorrect reference count update.
Memory corruption while reading secure file.
Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling.
Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions.
Memory corruption during the FRS UDS generation process.
Memory corruption while triggering commands in the PlayReady Trusted application.
Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.
Memory corruption while reading the FW response from the shared queue.
Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses.
Memory corruption while loading a VM from a signed VM image that is not coherent in the processor cache.
Memory corruption when the channel ID passed by user is not validated and further used.
Memory corruption in Core Services while executing the command for removing a single event listener.
Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame.
Memory corruption in Core when updating rollback version for TA and OTA feature is enabled.
Memory corruption while handling session errors from firmware.
Memory corruption while processing voice packet with arbitrary data received from ADSP.
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
Memory corruption while processing GPU page table switch.
Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data.