Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet

Buffer Over-read in Multi Mode Call Processor

Memory corruption while handling file descriptor during listener registration/de-registration

Memory corruption while processing API calls to NPU with invalid input

Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table

Memory Corruption in Audio while invoking IOCTLs calls from the user-space

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request

Buffer Over-read in Multi Mode Call Processor

Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE