Cryptographic issue may occur while encrypting license data

Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set

Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call

Information disclosure may occur while decoding the RTP packet with invalid header extension from network

Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources

Information disclosure may occur due to improper permission and access controls to Video Analytics engine

Use After Free in DSP Service

Use After Free in Computer Vision

Use After Free in Computer Vision

Stack-based Buffer Overflow in Camera Driver

Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers

Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input

Memory corruption occurs when a secure application is launched on a device with insufficient memory

Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations

Memory corruption while passing pages to DSP with an unaligned starting address

Memory corruption while processing identity credential operations in the trusted application

Memory corruption while copying packets received from unix clients

Memory corruption while performing encryption and decryption commands

Memory corruption while allocating buffers in DSP service

Memory corruption due to global buffer overflow when a test command uses an invalid payload type

memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency

Memory corruption during sub-system restart while processing clean-up to free up resources

Memory corruption during dynamic process creation call when client is only passing address and length of shell binary

Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC

Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer

Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads

Memory corruption in display driver while detaching a device

Memory corruption may occur during the synchronization of the camera`s frame processing pipeline

Memory corruption while handling multuple IOCTL calls from userspace for remote invocation

Buffer Over-read in WLAN Firmware

Transient DOS while processing power control requests with invalid antenna or stream values

Transient DOS while processing the tone measurement response buffer when the response buffer is out of range

Transient DOS while parsing per STA profile in ML IE

Transient DOS may occur while parsing SSID in action frames

Transient DOS may occur while parsing EHT operation IE or EHT capability IE

Buffer Over-read in WLAN Firmware

Buffer Over-read in WLAN Firmware

Use After Free in Computer Vision

Improper Validation of Syntactic Correctness of Input in Display

Improper Validation of Syntactic Correctness of Input in Kernel

Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE

Cryptographic issues while generating an asymmetric key pair for RKP use cases

Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

Out-of-bounds Write in Camera Driver

Out-of-bounds Write in Camera Driver

Memory corruption while accessing a synchronization object during concurrent operations

Memory corruption while performing sensor register read operations

Memory corruption while parsing clock configuration data for a specific hardware type

Memory corruption while processing multiple IOCTL calls from HLOS to DSP

Exposure of Private Personal Information to an Unauthorized Actor in Data Modem