Memory corruption due to stack-based buffer overflow in Core
Memory corruption due to buffer copy without checking size of input in modem while receiving WMI_REQUEST_STATS_CMDID command.
Transient DOS due to buffer over-read in WLAN while parsing corrupted NAN frames.
Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping.
Memory corruption in Multimedia Framework due to unsafe access to the data members
Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote
Memory corruption in core due to stack-based buffer overflow
Memory corruption in Core due to stack-based buffer overflow.
Memory corruption in Automotive Android OS due to improper input validation.
Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.
Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.
Information disclosure due to buffer over-read in WLAN while parsing BTM action frame.
Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check.
Memory corruption due to improper validation of array index in Multi-mode call processor.
Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.
Memory corruption in Core Platform while printing the response buffer in log.