Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs

Memory corruption during management frame processing due to mismatch in T2LM info element

Memory corruption while parsing the ML IE due to invalid frame content

Memory corruption while playing audio file having large-sized input buffer

Memory corruption while processing Codec2 during v13k decoder pitch synthesis

Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE

Memory corruption while processing MBSSID beacon containing several subelement IE

Memory corruption while parsing qcp clip with invalid chunk data size

Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point

Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE

Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size

Information Disclosure while parsing beacon frame in STA

Memory corruption while reading a value from a buffer controlled by the Guest Virtual Machine

Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication

Integer Overflow or Wraparound in Display

Use After Free in SCE-Mink

Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length

Information disclosure may occur while processing goodbye RTCP packet from network

Untrusted Pointer Dereference in Graphics

Use After Free in Graphics

Integer Overflow or Wraparound in Data Network Stack & Connectivity

NULL Pointer Dereference in HLOS

Stack-based Buffer Overflow in Camera Driver

Memory Corruption when adding user-supplied data without checking available buffer space

Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs

Memory Corruption when accessing trusted execution environment without proper privilege check

Memory Corruption while processing IOCTL calls when concurrent access to shared buffer occurs

Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls

Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls

Memory Corruption when accessing buffers with invalid length during TA invocation

Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors

Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input

Memory corruption while calculating offset from partition start point

Memory corruption when calculating oversized partition sizes without proper checks

Memory corruption when accessing resources in kernel driver

Memory corruption while processing a secure logging command in the trusted application

Memory corruption while deinitializing a HDCP session

Memory corruption while loading an invalid firmware in boot loader

Memory corruption while routing GPR packets between user and root when handling large data packet

Memory corruption while handling IOCTL calls to set mode

Memory corruption while copying packets received from unix clients

Memory corruption while processing large input data from a remote source via a communication interface

Memory corruption when triggering a subsystem crash with an out-of-range identifier

Memory corruption while processing client message during device management

Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions

Memory corruption while processing request sent from GVM

Memory corruption while performing encryption and decryption commands

Memory corruption while processing control commands in the virtual memory management interface

Memory corruption during PlayReady APP usecase while processing TA commands