Memory corruption while processing input message passed from FE driver.
Memory corruption while reading a type value from a buffer controlled by the Guest Virtual Machine.
Memory corruption may occur while processing message from frontend during allocation.
Transient DOS can occur while processing UCI command.
Information disclosure may occur due to improper permission and access controls to Video Analytics engine.
Memory corruption may occur due to improper input validation in clock device.
Memory corruption may occur during communication between primary and guest VM.
Memory corruption while processing camera use case IOCTL call.
Transient DOS during hypervisor virtual I/O operation in a virtual machine.
Information disclosure while deriving keys for a session for any Widevine use case.
While processing the authentication message in UE, improper authentication may lead to information disclosure.
Memory corruption while reading CPU state data during guest VM suspend.
Memory corruption while Invoking IOCTL calls from user-space to validate FIPS encryption or decryption functionality.
Memory corruption may occour while generating test pattern due to negative indexing of display ID.
Memory corruption while configuring a Hypervisor based input virtual device.
Memory corruption while handling IOCTL call from user-space to set latency level.
Memory corruption while taking a snapshot with hardware encoder due to unvalidated userspace buffer.
Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem.
Memory corruption occurs when invoking any IOCTL-calling application that executes all MCDM driver IOCTL calls.
Memory corruption can occur if an already verified IFS2 image is overwritten, bypassing boot verification. This allows unauthorized programs to be in…
Transient DOS can occur when GVM sends a specific message type to the Vdev-FastRPC backend.
Memory corruption when IOCTL call is invoked from user-space to read board data.
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.
Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space.
Memory corruption while processing IOCTL call invoked from user-space to verify non extension FIPS encryption and decryption functionality.
Memory corruption while processing FIPS encryption or decryption validation functionality IOCTL call.
information disclosure while invoking the mailbox read API.
Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size.
Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver.
Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver.