Information disclosure while registering commands from clients with diag through diagHal.
Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.
Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
Memory corruption in DSP Services during a remote call from HLOS to DSP.
Information disclosure may occur while processing the hypervisor log.
There may be information disclosure during memory re-allocation in TZ Secure OS.
Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass.
Information disclosure while creating MQ channels.
Transient DOS may occur while parsing SSID in action frames.
Transient DOS may occur while parsing extended IE in beacon.
Transient DOS may occur while parsing EHT operation IE or EHT capability IE.
Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.
memory corruption when an invalid firehose patch command is invoked.
Cryptographic issue while parsing RSA keys in COBR format.
Transient DOS while processing power control requests with invalid antenna or stream values.
Transient DOS while handling command data during power control processing.
Memory corruption while processing video packets received from video firmware.
Transient DOS while handling beacon frames with invalid IE header length.