Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake

Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network

Memory corruption while processing data packets in diag received from Unix clients

Memory corruption while processing manipulated payload in video firmware

Memory corruption while retrieving the CBOR data from TA

Memory corruption can occur in the camera when an invalid CID is used

Memory corruption while validating number of devices in Camera kernel

Memory corruption while registering a buffer from user-space to kernel-space using IOCTL calls

Use After Free in Computer Vision

Use After Free in Computer Vision

Use of Out-of-range Pointer Offset in Computer Vision

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Computer Vision

Memory corruption when the IOCTL call is interrupted by a signal

Buffer Over-read in WLAN HAL

Transient DOS while handling beacon frames with invalid IE header length

Transient DOS while processing DL NAS Transport message when message ID is not defined in the 3GPP specification

Transient DOS while processing CAG info IE received from NW

Transient DOS while processing IE fragments from server during DTLS handshake