Memory corruption while parsing qcp clip with invalid chunk data size.
Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time.
Memory corruption while processing concurrent IOCTL calls.
Memory corruption in Audio while processing the calibration data returned from ACDB loader.
Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.
Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.
Memory corruption while invoking HGSL IOCTL context create.
Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage.
Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.
Transient DOS when processing a NULL buffer while parsing WLAN vdev.
Transient DOS during hypervisor virtual I/O operation in a virtual machine.
Information Disclosure in Qualcomm IPC while reading values from shared memory in VM.
Transient DOS while processing DL NAS TRANSPORT message with payload length 0.
Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.
Memory corruption while using the UIM diag command to get the operators name.
Memory corruption in wearables while processing data from AON.
Information disclosure in WLAN HAL while handling command through WMI interfaces.
Memory corruption in DSP Service during a remote call from HLOS to DSP.