Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE.
Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point.
Memory corruption while selecting the PLMN from SOR failed list.
Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
Memory corruption in WLAN Firmware while doing a memory copy of pmk cache.
Memory corruption in Modem while processing security related configuration before AS Security Exchange.
Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute.
Memory Corruption in Multi-mode Call Processor while processing bit mask API.
Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE.
Memory corruption in WLAN Host while processing RRM beacon on the AP.
Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.
Memory corruption in Core while processing control functions.
Memory corruption in Core Services while executing the command for removing a single event listener.
Information disclosure in Modem while processing SIB5.
Information Disclosure while parsing beacon frame in STA.
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
Memory corruption while decoding of OTA messages from T3448 IE.
Cryptographic issue in Data Modem due to improper authentication during TLS handshake.
Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data.
Memory corruption in core services when Diag handler receives a command to configure event listeners.
Memory corruption when decoding corrupted satellite data files with invalid signature offsets.
Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.
Memory corruption while loading an ELF segment in TEE Kernel.
Improper Access to the VM resource manager can lead to Memory Corruption.
Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP.
Memory corruption while performing finish HMAC operation when context is freed by keymaster.
Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager.
Memory corruption while processing IOCTL call to set metainfo.
Memory corruption while allocating memory in HGSL driver.
Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released.