Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake.
Memory corruption while processing Codec2 during v13k decoder pitch synthesis.
Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization.
Information disclosure in Modem while processing SIB5.
Information Disclosure while parsing beacon frame in STA.
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
Memory corruption while decoding of OTA messages from T3448 IE.
Memory corruption while configuring a Hypervisor based input virtual device.
Memory corruption in Kernel while handling GPU operations.
Memory corruption while performing finish HMAC operation when context is freed by keymaster.
Memory corruption while processing IOCTL call to set metainfo.
Memory corruption while allocating memory in HGSL driver.
Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released.
Memory corruption while Configuring the SMR/S2CR register in Bypass mode.
Information disclosure while parsing the OCI IE with invalid length.
Memory corruption in Core when updating rollback version for TA and OTA feature is enabled.
Memory corruption when the bandpass filter order received from AHAL is not within the expected range.
Memory corruption when IPC callback handle is used after it has been released during register callback by another thread.
Memory corruption while processing key blob passed by the user.
Memory corruption when an invoke call and a TEE call are bound for the same trusted application.
Memory corruption when keymaster operation imports a shared key.
Memory corruption during session sign renewal request calls in HLOS.
Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.
Memory corruption while processing voice packet with arbitrary data received from ADSP.
Memory corruption during GNSS HAL process initialization.
Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace.
Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
Transient DOS while processing CAG info IE received from NW.
Transient DOS while processing IE fragments from server during DTLS handshake.
Transient DOS while decoding an ASN.1 OER message containing a SEQUENCE of unknown extensions.