Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.
Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers.
Transient DOS in Data modem while handling TLB control messages from the Network.
Memory corruption in SPS Application while requesting for public key in sorter TA.
Transient DOS while processing DL NAS TRANSPORT message with payload length 0.
Transient DOS in Multi-Mode Call Processor while processing UE policy container.
Improper Access to the VM resource manager can lead to Memory Corruption.
Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.
Memory corruption when two threads try to map and unmap a single node simultaneously.
Memory corruption in TZ Secure OS while loading an app ELF.
Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.
Information disclosure in IOE Firmware while handling WMI command.
Transient DOS during hypervisor virtual I/O operation in a virtual machine.
Memory corruption in Core when updating rollback version for TA and OTA feature is enabled.
Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data.
Memory corruption in HLOS while running playready use-case.
Improper handling of resource allocation in virtual machines can lead to information exposure in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking