Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions

NULL Pointer Dereference in SPS Applications

Improper Access Control in Automotive Multimedia

Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling

Memory corruption while processing GPU page table switch

Memory corruption while handling session errors from firmware

Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers

Memory corruption during session sign renewal request calls in HLOS

Memory corruption when keymaster operation imports a shared key

Information disclosure while creating MQ channels

Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon

Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero

Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI

Transient DOS when NAS receives ODAC criteria of length 1 and type 1 in registration accept OTA

Stack-based Buffer Overflow in Display

Cryptographic Issues in Core

Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE