Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set

Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources

Information disclosure may occur due to improper permission and access controls to Video Analytics engine

Memory corruption occurs when a secure application is launched on a device with insufficient memory

Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations

Memory corruption while passing pages to DSP with an unaligned starting address

Memory corruption while processing a secure logging command in the trusted application

Memory corruption while loading an invalid firmware in boot loader

Memory corruption while allocating buffers in DSP service

Memory corruption while processing a malformed license file during reboot

Memory corruption due to global buffer overflow when a test command uses an invalid payload type

Memory corruption while performing private key encryption in trusted application

Memory corruption during sub-system restart while processing clean-up to free up resources

Memory corruption while processing data packets in diag received from Unix clients

Memory corruption while processing manipulated payload in video firmware

Memory corruption during dynamic process creation call when client is only passing address and length of shell binary

Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC

Memory corruption while triggering commands in the PlayReady Trusted application

Memory corruption while reading secure file

Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads

Memory corruption may occur while validating ports and channels in Audio driver

Memory corruption may occur during the synchronization of the camera`s frame processing pipeline

Memory corruption while handling multuple IOCTL calls from userspace for remote invocation

Information disclosure while creating MQ channels

Transient DOS while processing power control requests with invalid antenna or stream values

Transient DOS may occur while processing malformed length field in SSID IEs

Transient DOS while processing the tone measurement response buffer when the response buffer is out of range

Transient DOS may occur while parsing EHT operation IE or EHT capability IE