Memory corruption in WLAN HOST while processing the WLAN scan descriptor list

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet

Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call

Weak configuration in Automotive while VM is processing a listener request from TEE

Memory corruption while handling client exceptions, allowing unauthorized channel access

Memory corruption while handling file descriptor during listener registration/de-registration

Memory corruption while processing GPU page table switch

Memory corruption while processing audio effects

Memory corruption in Automotive GPU while querying a gsl memory node

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session

The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race…

Memory corruption may occur while processing voice call registration with user

Memory corruption while accessing MSM channel map and mixer functions

Information disclosure while processing message from client with invalid payload