NULL Pointer Dereference in WLAN Firmware
Transient DOS when processing a NULL buffer while parsing WLAN vdev.
Transient DOS when processing a NULL buffer while parsing WLAN vdev.
Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR.
Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.
Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size.
Memory corruption during concurrent access to server info object due to unprotected critical field.
Memory corruption when user provides data for FM HCI command control operations.
Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received.
Memory corruption while processing a QMI request for allocating memory from a DHMS supported subsystem.
Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.
Memory Corruption in Core due to secure memory access by user while loading modem image.
Memory corruption in Core when updating rollback version for TA and OTA feature is enabled.
Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data.
Memory corruption in HLOS while running playready use-case.
The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.
Memory corruption in Audio during playback with speaker protection.
Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART.
Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload.
Memory corruption in WLAN HAL while handling command through WMI interfaces.
Memory corruption while power-up or power-down sequence of the camera sensor.