Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.
Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.
Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.
Memory corruption when allocating and accessing an entry in an SMEM partition.
Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.
Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon.
Transient DOS while parsing fragments of MBSSID IE from beacon frame.
Transient DOS while parsing ESP IE from beacon/probe response frame.
Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released.
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.
Memory corruption when two threads try to map and unmap a single node simultaneously.
Memory corruption when BTFM client sends new messages over Slimbus to ADSP.
Memory corruption while processing voice packet with arbitrary data received from ADSP.
Memory corruption while processing multiple IOCTL calls from HLOS to DSP.
Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.
Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow.
Memory corruption while processing fastboot commands with invalid input.
Memory Corruption when processing display command line information due to improper initialization of a variable.
Memory corruption while processing fastboot OEM commands.
Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.
Memory corruption while processing fastboot commands with improperly formatted input.
Memory Corruption when processing fastboot commands to set display mode.
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.
Cryptographic Issue while processing registration requests with malformed or missing authentication parameters.
Transient DOS when processing authentication frames with invalid FILS information element header lengths.
Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling.
Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.
Memory corruption while processing identity credential operations in the trusted application.
Memory corruption while deinitializing a HDCP session.
Memory corruption while processing a secure logging command in the trusted application.