Exposure of Private Personal Information to an Unauthorized Actor in Data Modem

Reachable Assertion in FW

Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE

Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message

There may be information disclosure during memory re-allocation in TZ Secure OS

Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call

Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation

Denial of service in MODEM due to improper pointer handling

Reading PRNG output may lead to improper key generation due to lack of buffer validation in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…