Buffer Copy Without Checking Size of Input in WLAN HOST
Memory Corruption in WLAN HOST while parsing QMI response message from firmware.
Memory Corruption in WLAN HOST while parsing QMI response message from firmware.
Memory corruption in TZ Secure OS while loading an app ELF.
Memory corruption in Core while processing control functions.
Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level.
Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation.
Memory corruption when resource manager sends the host kernel a reply message with multiple fragments.
Memory corruption during management frame processing due to mismatch in T2LM info element.
Memory corruption while playing audio file having large-sized input buffer.
Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager.
Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.
Memory corruption when BTFM client sends new messages over Slimbus to ADSP.
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.
Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location.
Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.
Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size.
Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE.
Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame.
Memory corruption when user provides data for FM HCI command control operations.
Memory corruption while processing a QMI request for allocating memory from a DHMS supported subsystem.
Memory Corruption in Core due to secure memory access by user while loading modem image.