Memory corruption while decoding of OTA messages from T3448 IE

Memory corruption during sub-system restart while processing clean-up to free up resources

Memory corruption while processing data packets in diag received from Unix clients

Memory corruption while processing manipulated payload in video firmware

Memory corruption while reading the FW response from the shared queue

Memory corruption while prociesing command buffer buffer in OPE module

Memory corruption may occur during IO configuration processing when the IO port count is invalid

Memory corruption during concurrent access to server info object due to incorrect reference count update

Memory corruption during concurrent access to server info object due to unprotected critical field

Memory corruption while processing IOCTL from user space to handle GPU AHB bus error

Use After Free in Qualcomm IPC

Memory corruption when IPC callback handle is used after it has been released during register callback by another thread

Memory corruption when the IOCTL call is interrupted by a signal

Memory corruption when multiple listeners are being registered with the same file descriptor

Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

Memory corruption while parsing the memory map info in IOCTL calls

Memory corruption in Audio during a playback or a recording due to race condition between allocation and deallocation of graph object

Information disclosure while processing information on firmware image during core initialization

Information disclosure while parsing dts header atom in Video