Incorrect Authorization in Graphics

Incorrect Authorization in Graphics Windows

Integer Overflow or Wraparound in Graphics

Integer Overflow or Wraparound in GPS

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length

Information disclosure may occur while processing goodbye RTCP packet from network

Missing Authentication for Critical Function in Data Modem

Use After Free in DSP Service

Use After Free in Graphics

NULL Pointer Dereference in SPS Applications

Use After Free in Automotive Audio

Memory corruption while performing private key encryption in trusted application

Memory corruption while handling client exceptions, allowing unauthorized channel access

Memory corruption may occur while attaching VM when the HLOS retains access to VM

Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size

Memory Corruption in Core during syscall for Sectools Fuse comparison feature

Insecure Security Identifier Mechanism in Multi-Mode Call Processor

Transient DOS while processing CCCH data when NW sends data with invalid length

Transient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE network

Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon

Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero

Transient DOS when NAS receives ODAC criteria of length 1 and type 1 in registration accept OTA

Transient DOS in Multi-Mode Call Processor while processing UE policy container

Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage

Transient DOS in Modem while triggering a camping on an 5G cell

The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race…