Buffer Over-read in WLAN Host Communication
Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location.
Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location.
Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data.
Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.
Memory corruption when multiple listeners are being registered with the same file descriptor.
Memory corruption in Kernel while parsing metadata.
Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame.
Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size.
Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received.
Memory corruption while processing a QMI request for allocating memory from a DHMS supported subsystem.
Transient DOS in WLAN Firmware while parsing a NAN management frame.
Transient DOS in Modem while triggering a camping on an 5G cell.
Memory Corruption in Core due to secure memory access by user while loading modem image.
Memory corruption while processing finish_sign command to pass a rsp buffer.
Memory corruption while using the UIM diag command to get the operators name.
Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.
Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.
Information disclosure in WLAN HAL while handling command through WMI interfaces.
Transient DOS while decoding message of size that exceeds the available system memory.
Memory corruption when there is failed unmap operation in GPU.
Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.