Use of Out-of-range Pointer Offset in Qualcomm IPC
Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.
Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.
Memory corruption while processing manipulated payload in video firmware.
Memory corruption in video while parsing invalid mp2 clip.
Memory corruption while processing buffer initialization, when trusted report for certain report types are generated.
Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.
Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.
Transient DOS while processing DL NAS TRANSPORT message with payload length 0.
Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR.
Transient DOS when processing a NULL buffer while parsing WLAN vdev.
Memory corruption when BTFM client sends new messages over Slimbus to ADSP.
Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.
Memory corruption when processing cmd parameters while parsing vdev.
Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.
Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size.
Memory corruption when multiple listeners are being registered with the same file descriptor.
Information disclosure while parsing dts header atom in Video.
Memory corruption while passing untrusted/corrupted pointers from DSP to EVA.
Memory corruption when user provides data for FM HCI command control operations.
Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received.