Transient DOS while processing video packets received from video firmware.
Information disclosure while registering commands from clients with diag through diagHal.
Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions.
Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.
Memory corruption while processing IOCTL calls to add route entry in the HW.
Memory corruption while invoking IOCTL map buffer request from userspace.
Cryptographic issues while generating an asymmetric key pair for RKP use cases.
There may be information disclosure during memory re-allocation in TZ Secure OS.
Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass.
Information disclosure while creating MQ channels.
Transient DOS may occur while parsing SSID in action frames.
Transient DOS may occur while parsing extended IE in beacon.
Transient DOS may occur while parsing EHT operation IE or EHT capability IE.
Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.
Memory corruption while assigning memory from the source DDR memory(HLOS) to ADSP.
memory corruption when an invalid firehose patch command is invoked.
Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element (IE) of a beacon frame that is received from over-the-air (OTA).
Cryptographic issue while parsing RSA keys in COBR format.
Memory corruption while processing video packets received from video firmware.