Memory corruption in Modem while processing security related configuration before AS Security Exchange

Memory corruption while parsing the ADSP response command

Memory corruption due to use after free in Core when multiple DCI clients register and deregister

Memory corruption due to buffer copy without checking the size of input in Core while processing ioctl commands from diag client applications

Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries

Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key

Memory Corruption in Multimedia Framework due to integer overflow when synx bind is called along with synx signal

Transient DOS in Modem when a Beam switch request is made with a non-configured BWP

Transient DOS in Modem after RRC Setup message is received

Transient DOS in Modem while triggering a camping on an 5G cell

Transient DOS in Audio while remapping channel buffer in media codec decoding

Transient DOS due to reachable assertion in Modem because of invalid network configuration

Assertion occurs while processing Reconfiguration message due to improper validation

Transient DOS due to reachable assertion in Modem during OSI decode scheduling

Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH

Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message

Transient DOS due to uncontrolled resource consumption in Linux kernel when malformed messages are sent from the Gunyah Resource Manager message queue