Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet

Information disclosure may occur while processing goodbye RTCP packet from network

Memory corruption while performing private key encryption in trusted application

Transient DOS when NAS receives ODAC criteria of length 1 and type 1 in registration accept OTA

Transient DOS in Multi-Mode Call Processor while processing UE policy container

Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage

Transient DOS in Modem while triggering a camping on an 5G cell

The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race…

Memory corruption when multiple threads try to unregister the CVP buffer at the same time

Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it

Information disclosure in WLAN HAL when reception status handler is called