Buffer Over-read in Multi Mode Call Processor

Use of Uninitialized Variable in HLOS

Buffer Copy Without Checking Size of Input in Core Services

Memory corruption while processing a malformed license file during reboot

Memory corruption during PlayReady APP usecase while processing TA commands

Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware

Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur

Memory corruption in display driver while detaching a device

Insecure Security Identifier Mechanism in Multi-Mode Call Processor

Transient DOS while processing received beacon frame

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request

Missing Cryptographic Step in Data Modem

Improper Verification of Cryptographic Signature in Boot