Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released

Memory corruption while performing finish HMAC operation when context is freed by keymaster

Memory corruption when IOMMU unmap of a GPU buffer fails in Linux

Memory corruption when there is failed unmap operation in GPU

Memory corruption while processing finish_sign command to pass a rsp buffer

Memory corruption in SPS Application while requesting for public key in sorter TA

Memory corruption in HLOS while converting from authorization token to HIDL vector

Memory corruption in Audio while processing the calibration data returned from ACDB loader

Memory corruption in Audio while processing IIR config data from AFE calibration block

Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points

Memory corruption in Audio when memory map command is executed consecutively in ADSP

Memory corruption in Audio during playback with speaker protection

Memory corruption in HLOS while running playready use-case

Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size

Memory corruption while sending SMS from AP firmware

Memory corruption while using the UIM diag command to get the operators name

Memory corruption in Boot while running a ListVars test in UEFI Menu during boot

Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments

Memory Corruption in SPS Application while exporting public key in sorter TA

Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM

Memory corruption in Audio while processing the VOC packet data from ADSP

Memory corruption in core services when Diag handler receives a command to configure event listeners

Memory corruption while processing audio effects

Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command

Memory corruption in Graphics while processing user packets for command submission

Memory corruption in WLAN HAL while handling command through WMI interfaces

Memory corruption in WLAN HAL while passing command parameters through WMI interfaces

Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload

Memory corruption in WLAN handler while processing PhyID in Tx status handler

Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload

Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload

Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers

Memory corruption while allocating memory in COmxApeDec module in Audio

Memory Corruption in Audio while playing amrwbplus clips with modified content

Memory Corruption in WLAN HOST while fetching TX status information

Memory Corruption in Data Modem while processing DMA buffer release event about CFR data

Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message

Memory Corruption in WLAN HOST while parsing QMI response message from firmware

Memory Corruption in Audio while allocating the ion buffer during the music playback

Memory corruption in Linux while calling system configuration APIs

Memoru corruption in Audio when ADSP sends input during record use case

Memory corruption in WLAN HOST while receiving an WMI event from firmware

Memory corruption due to double free in Core while mapping HLOS address to the list

Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message

Memory corruption in Linux android due to double free while calling unregister provider after register call

Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool

Memory corruption in Graphics while importing a file

Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length

Memory corruption due to use after free in Modem while modem initialization

Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message