Information disclosure while registering commands from clients with diag through diagHal.
Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions.
Information disclosure while processing message from client with invalid payload.
Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.
Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
Memory corruption in DSP Services during a remote call from HLOS to DSP.
Cryptographic issues while generating an asymmetric key pair for RKP use cases.
There may be information disclosure during memory re-allocation in TZ Secure OS.
Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards.
Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass.
Information disclosure while creating MQ channels.
Transient DOS may occur while parsing SSID in action frames.
Transient DOS may occur while parsing EHT operation IE or EHT capability IE.
Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.
Memory corruption while assigning memory from the source DDR memory(HLOS) to ADSP.
Memory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients.
memory corruption when an invalid firehose patch command is invoked.
Memory corruption while releasing shared resources in MinkSocket listener thread.