Memory corruption while processing MBSSID beacon containing several subelement IE.
Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE.
Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.
Memory corruption during management frame processing due to mismatch in T2LM info element.
Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE.
Memory corruption in WLAN Firmware while doing a memory copy of pmk cache.
Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute.
Memory corruption in HLOS while running playready use-case.
Memory corruption in Core while processing control functions.
Memory corruption in Core Services while executing the command for removing a single event listener.
Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory.
Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone.
Memory corruption due to double free in core while initializing the encryption key.
Memory Corruption in Core due to incorrect type conversion or cast in secureioread/write function in TEE.
Memory corruption while loading an ELF segment in TEE Kernel.
Improper Access to the VM resource manager can lead to Memory Corruption.
Memory corruption while processing TPC target power table in FTM TPC.
Memory corruption while loading a VM from a signed VM image that is not coherent in the processor cache.
Memory corruption as GPU registers beyond the last protected range can be accessed through LPAC submissions.
Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.
Memory corruption when BTFM client sends new messages over Slimbus to ADSP.
Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
Memory corruption due to improper validation of array index in WLAN HAL when received lmitemNum is out of range.
Memory Corruption in HLOS while registering for key provisioning notify.
Memory corruption in DSP Service during a remote call from HLOS to DSP.
Memory corruption in WLAN due to incorrect type cast while sending WMISCANSCHPRIOTBLCMDID message.
Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.
Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.
Memory Corruption in Core due to secure memory access by user while loading modem image.
Memory corruption in Audio when SSR event is triggered after music playback is stopped.