Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.
Memory corruption in TZ Secure OS while loading an app ELF.
Memory corruption in Core while processing control functions.
Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVCS_LOAD_MODULE command.
Memory corruption in Audio when memory map command is executed consecutively in ADSP.
Memory corruption while processing concurrent IOCTL calls.
Memory corruption while processing IOCTL call for getting group info.
Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache.
Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level.
Transient DOS in Audio when invoking callback function of ASM driver.
Information disclosure in Audio while accessing AVCS services from ADSP payload.
Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points.
Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR.
Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16.
Transient DOS while processing PDU Release command with a parameter PDU ID out of range.
Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command.
Memory corruption during management frame processing due to mismatch in T2LM info element.
Memory corruption while playing audio file having large-sized input buffer.
Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager.