Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE

Transient DOS may occur while parsing extended IE in beacon

Memory corruption while assigning memory from the source DDR memory(HLOS) to ADSP

Transient DOS may occur while processing the country IE

Information disclosure while parsing the OCI IE with invalid length

Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem

Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present

Buffer Over-read in WLAN Firmware

Buffer Over-read in Multi Mode Call Processor

Transient DOS while processing TID-to-link mapping IE elements

Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command

Information disclosure while handling T2LM Action Frame in WLAN Host

Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received

Transient DOS while processing DL NAS TRANSPORT message with payload length 0

Transient DOS while processing DL NAS Transport message when message ID is not defined in the 3GPP specification

Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR

Transient DOS while processing PDU Release command with a parameter PDU ID out of range

Transient DOS while processing CAG info IE received from NW

Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16

Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR

Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers

Transient DOS while processing IE fragments from server during DTLS handshake

Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame

Transient DOS in Multi-Mode Call Processor while processing UE policy container

Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage

Transient DOS in WLAN Firmware while processing a FTMR frame

Transient DOS in Bluetooth Host while rfc slot allocation

Cryptographic issue in Data Modem due to improper authentication during TLS handshake

Information Disclosure in data Modem while parsing an FMTP line in an SDP message

Stack-based Buffer Overflow in Display

Missing Cryptographic Step in Data Modem

Cryptographic issues while generating an asymmetric key pair for RKP use cases

Improper Input Validation in Trusted Execution Environment

Information disclosure in Audio while accessing AVCS services from ADSP payload

Memory corruption while loading a VM from a signed VM image that is not coherent in the processor cache

Memory corruption while processing multiple IOCTL calls from HLOS to DSP

Memory corruption while processing the update SIM PB records request

Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size

Integer Underflow (Wrap or Wraparound) in WLAN Host

Reachable Assertion in Modem

Transient DOS while parsing BTM ML IE when per STA profile is not included

Permanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR container whose integrity check has failed, and the other is LPP where UE needs…

Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling…

Buffer Over-read in Automotive OS Platform Android

Buffer Over-read in Video

Buffer Over-read in Video

Information disclosure while deriving keys for a session for any Widevine use case

Information disclosure while processing IO control commands

Information disclosure during audio playback

Buffer Over-read in Audio