Transient DOS while processing received beacon frame.
Transient DOS may occur while processing malformed length field in SSID IEs.
Information disclosure while processing the hash segment in an MBN file.
Information disclosure while reading data from an image using specified offset and size parameters.
memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.
Cryptographic issue while performing RSA PKCS padding decoding.
Memory corruption during PlayReady APP usecase while processing TA commands.
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
Memory corruption in DSP Services during a remote call from HLOS to DSP.
Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling.
Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions.
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.
Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses.
Memory corruption while loading an ELF segment in TEE Kernel.
Memory corruption while assigning memory from the source DDR memory(HLOS) to ADSP.
Memory Corruption in Multi-mode Call Processor while processing bit mask API.
Memory corruption while loading a VM from a signed VM image that is not coherent in the processor cache.
Memory corruption in Audio while processing the VOC packet data from ADSP.
There may be information disclosure during memory re-allocation in TZ Secure OS.
memory corruption when an invalid firehose patch command is invoked.
Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
Transient DOS in Modem while allocating DSM items.
Improper Access to the VM resource manager can lead to Memory Corruption.
Information Disclosure in data Modem while parsing an FMTP line in an SDP message.
Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.
Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains IPPROTONONE as the next header.
Memory corruption in Core while processing control functions.
Memory Corruption in Audio while allocating the ion buffer during the music playback.
Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.
Memory Corruption in WLAN HOST while fetching TX status information.