Memory corruption while invoking HGSL IOCTL context create.
Memory corruption while processing a QMI request for allocating memory from a DHMS supported subsystem.
Memory corruption while invoking IOCTLs calls in Automotive Multimedia.
Memory corruption when the payload received from firmware is not as per the expected protocol size.
Memory corruption while processing IOCTL call for getting group info.
Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it for a process-specific task, issues may arise.
Information disclosure while parsing the OCI IE with invalid length.
Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.
Memory corruption while processing video packets received from video firmware.
Memory corruption while processing manipulated payload in video firmware.
Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.
Transient DOS when processing target power rate tables during channel configuration.
Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.
Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers.
Transient DOS while processing CAG info IE received from NW.
Transient DOS while processing PDU Release command with a parameter PDU ID out of range.
Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16.
Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR.
Memory corruption while processing Codec2 during v13k decoder pitch synthesis.
Memory corruption while processing buffer initialization, when trusted report for certain report types are generated.
Memory corruption in SPS Application while requesting for public key in sorter TA.
Transient DOS while processing DL NAS TRANSPORT message with payload length 0.
Transient DOS while processing DL NAS Transport message when message ID is not defined in the 3GPP specification.
Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR.
Memory corruption while processing finishsign command to pass a rsp buffer.
Memory corruption while loading a VM from a signed VM image that is not coherent in the processor cache.
Memory corruption while verifying the serialized header when the key pairs are generated.
Memory corruption in HLOS while checking for the storage type.
Memory corruption while playing audio file having large-sized input buffer.
Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received.