Memory corruption while selecting the PLMN from SOR failed list

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet

Information disclosure may occur while processing goodbye RTCP packet from network

Memory corruption while performing private key encryption in trusted application

Memory corruption may occur while attaching VM when the HLOS retains access to VM

Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers

Memory corruption when keymaster operation imports a shared key

Transient DOS while processing CCCH data when NW sends data with invalid length

Transient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE network

Transient DOS when NAS receives ODAC criteria of length 1 and type 1 in registration accept OTA