Information disclosure while exposing internal TA-to-TA communication APIs to HLOS

Memory corruption while processing the update SIM PB records request

Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size

Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan

Transient DOS while processing the CU information from RNR IE

Transient DOS while parsing BTM ML IE when per STA profile is not included

Transient DOS while parsing fragments of MBSSID IE from beacon frame

Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE

Permanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR container whose integrity check has failed, and the other is LPP where UE needs…

Information disclosure while processing a firmware event

Information disclosure while opening a fastrpc session when domain is not sanitized

Transient DOS while processing video packets received from video firmware