Memory corruption while selecting the PLMN from SOR failed list

Buffer Over-read in Multi Mode Call Processor

Use of Uninitialized Variable in HLOS

Memory corruption while copying packets received from unix clients

Memory corruption while processing a malformed license file during reboot

Memory corruption during PlayReady APP usecase while processing TA commands

Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware

Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur

Memory corruption in display driver while detaching a device

Insecure Security Identifier Mechanism in Multi-Mode Call Processor

Transient DOS while processing received beacon frame

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request

Missing Cryptographic Step in Data Modem

Improper Verification of Cryptographic Signature in Boot

Use After Free in HLOS

Exposure of Private Personal Information to an Unauthorized Actor in Data Modem

Reachable Assertion in Modem

Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE

Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus

There may be information disclosure during memory re-allocation in TZ Secure OS