Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.
Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.
Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
Memory corruption in DSP Services during a remote call from HLOS to DSP.
There may be information disclosure during memory re-allocation in TZ Secure OS.
Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards.
Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass.
Information disclosure while creating MQ channels.
Transient DOS may occur while parsing SSID in action frames.
Transient DOS may occur while parsing EHT operation IE or EHT capability IE.
Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.
memory corruption when an invalid firehose patch command is invoked.
Memory corruption while releasing shared resources in MinkSocket listener thread.
Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element (IE) of a beacon frame that is received from over-the-air (OTA).
Cryptographic issue while parsing RSA keys in COBR format.
Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network.
Memory corruption while processing video packets received from video firmware.
Transient DOS while handling beacon frames with invalid IE header length.