Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake

Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network

Memory corruption during sub-system restart while processing clean-up to free up resources

Memory corruption while processing data packets in diag received from Unix clients

Memory corruption while processing manipulated payload in video firmware

Memory corruption while retrieving the CBOR data from TA

Memory corruption while reading the FW response from the shared queue

Memory corruption while triggering commands in the PlayReady Trusted application

Memory corruption while handling multiple IOCTL calls from userspace to operate DMA operations

Memory corruption while processing IOCTL from user space to handle GPU AHB bus error

Memory corruption can occur in the camera when an invalid CID is used

Memory corruption in Camera due to unusually high number of nodes passed to AXI port

Memory corruption while validating number of devices in Camera kernel

Memory corruption while processing frame packets

Memory corruption while invoking IOCTL calls from user-space to kernel-space to handle session errors

Memory corruption while registering a buffer from user-space to kernel-space using IOCTL calls

Use After Free in Computer Vision

Use After Free in Computer Vision

Use of Out-of-range Pointer Offset in Computer Vision

Buffer Copy Without Checking Size of Input in Data Network Stack & Connectivity

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Computer Vision

Buffer Over-read in WLAN HAL

Transient DOS while handling beacon frames with invalid IE header length

Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE

Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem

Transient DOS while processing DL NAS Transport message when message ID is not defined in the 3GPP specification

Transient DOS while processing CAG info IE received from NW

Transient DOS while processing IE fragments from server during DTLS handshake

Buffer Over-read in WLAN Firmware