Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker

Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources

Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation

Memory corruption can occur in the camera when an invalid CID is used

Buffer Copy Without Checking Size of Input in Data Network Stack & Connectivity

Memory corruption during GNSS HAL process initialization

Memory corruption while handling session errors from firmware

Untrusted Pointer Dereference in Computer Vision

Memory corruption during session sign renewal request calls in HLOS

Memory corruption when the IOCTL call is interrupted by a signal

Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon

Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero

Transient DOS during music playback of ALAC content

Cryptographic Issues in Core

Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it