Transient DOS when processing target power rate tables during channel configuration.
Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.
Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.
Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.
Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.
Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.
Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data.
Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message.
Memory Corruption in WLAN HOST while parsing QMI response message from firmware.
Memory corruption while handling session errors from firmware.
Transient DOS while processing the CU information from RNR IE.
Memory corruption while processing voice packet with arbitrary data received from ADSP.
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
Memory corruption during GNSS HAL process initialization.
Memory corruption while processing GPU page table switch.
Memory corruption while processing GPU commands.
Information disclosure while parsing the OCI IE with invalid length.
Memory corruption may occur during IO configuration processing when the IO port count is invalid.
Memory corruption when memory mapped in a VBO is not unmapped by the GPU SMMU.
Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table.
Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus.
Transient DOS while decoding attach reject message received by UE, when IEI is set to ESMIEI.
Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and reclaiming of memory buffers are performed at the same time.
Memory corruption while processing graphics kernel driver request to create DMA fence.
Transient DOS while processing TID-to-link mapping IE elements.
Memory corruption when kernel driver attempts to trigger hardware fences.
Memory corruption when keymaster operation imports a shared key.
Memory corruption while creating a fence to wait on timeline events, and simultaneously signal timeline events.
Memory corruption during session sign renewal request calls in HLOS.