In linkturbonative service, there is a possible command injection due to improper input validation

In sim service, there is a possible way to write permission usage records of an app due to a missing permission check

In gnss service, there is a possible out of bounds write due to a missing bounds check

In telephony service, there is a missing permission check

In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling