Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.
Information Disclosure in data Modem while parsing an FMTP line in an SDP message.
Memory Corruption in Audio while allocating the ion buffer during the music playback.
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.
Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.
Memory corruption while invoking callback function of AFE from ADSP.
Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.
Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.
Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.
Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.
Memory corruption in Audio while processing RT proxy port register driver.
Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
Transient DOS in WLAN Firmware while parsing a BTM request.
Memory corruption in Audio when memory map command is executed consecutively in ADSP.
Memory corruption in Audio while running invalid audio recording from ADSP.
Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.
Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers.
Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL.
Memory corruption when two threads try to map and unmap a single node simultaneously.