Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.
Memory corruption while processing IOCTL call to set metainfo.
Memory corruption while allocating memory in HGSL driver.
Memory Corruption in Audio while allocating the ion buffer during the music playback.
Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.
Memory corruption while handling IOCTL calls in JPEG Encoder driver.
Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver.
Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice.
Memory corruption while station LL statistic handling.
Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver.
Memory corruption while parsing the memory map info in IOCTL calls.
Memory corruption may occour while generating test pattern due to negative indexing of display ID.
Memory corruption while taking a snapshot with hardware encoder due to unvalidated userspace buffer.
Memory corruption may occur during IO configuration processing when the IO port count is invalid.
Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.
Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.
Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.
Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.
Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data.
Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message.
Memory Corruption in WLAN HOST while parsing QMI response message from firmware.
Memory Corruption in WLAN HOST while fetching TX status information.
Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.
Transient DOS during music playback of ALAC content.
Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.
Transient DOS when processing target power rate tables during channel configuration.
Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.
Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it.
Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access.