Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR

Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers

Transient DOS while parse fils IE with length equal to 1

Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame

Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL

Transient DOS in Multi-Mode Call Processor while processing UE policy container

Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage

Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header

Transient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element

Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host

Transient DOS in WLAN Firmware while parsing a BTM request

Transient DOS in Data Modem during DTLS handshake

Transient DOS while parsing WPA IES, when it is passed with length more than expected size

Transient DOS when processing a NULL buffer while parsing WLAN vdev

Transient DOS in Bluetooth Host while rfc slot allocation

Information Disclosure in data Modem while parsing an FMTP line in an SDP message

Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value

Transient DOS in Modem while allocating DSM items

Transient DOS in Modem while triggering a camping on an 5G cell

Transient DOS in WLAN Host when an invalid channel (like channel out of range) is received in STA during CSA IE

Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel in CSA IE

Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame

Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement (CSA)

Buffer Over-read in WLAN Firmware

Buffer Over-read in BT Controller

Improper Validation of Syntactic Correctness of Input in Display

Improper Validation of Syntactic Correctness of Input in Display

Improper Validation of Syntactic Correctness of Input in Kernel

Improper Validation of Syntactic Correctness of Input in Kernel

Missing Cryptographic Step in Data Modem

Missing Authentication for Critical Function in HLOS

Cryptographic issues while generating an asymmetric key pair for RKP use cases

Improper Input Validation in Trusted Execution Environment

Information disclosure in Audio while accessing AVCS services from ADSP payload

Buffer Over-read in Qualcomm IPC

Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

Memory corruption while processing simultaneous requests via escape path

Memory corruption while taking a snapshot with hardware encoder due to unvalidated userspace buffer

Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver

Memory corruption while handling IOCTL calls in JPEG Encoder driver

Memory corruption while loading a VM from a signed VM image that is not coherent in the processor cache