Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.
Memory corruption in modem due to improper input validation while handling the incoming CoAP message
Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface
memory corruption in modem due to improper check while calculating size of serialized CoAP message
Memory correction in modem due to buffer overwrite during coap connection
Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received.
Memory Corruption in Multi-mode Call Processor while processing bit mask API.
Memory corruption in TZ Secure OS while requesting a memory allocation from TA region.
Memory corruption in HLOS while running playready use-case.
Memory corruption in Core while processing control functions.
Memory corruption while loading an ELF segment in TEE Kernel.
Memory corruption in Audio during playback with speaker protection.
Memory corruption while performing finish HMAC operation when context is freed by keymaster.
Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.
Memory corruption due to double free in Core while mapping HLOS address to the list.
Memory Corruption in Core due to secure memory access by user while loading modem image.
Information disclosure due to buffer over-read in Modem while parsing DNS hostname.
Information disclosure due to buffer over-read while parsing DNS response packets in Modem.
Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length.
Information disclosure in modem due to improper check of IP type while processing DNS server query
Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet.
Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in header.
Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.
Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet
Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message
Information disclosure due to buffer over-read in modem while reading configuration parameters.
The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.
Memory corruption while processing key blob passed by the user.