Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.
Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.
Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.
Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony.
Memory corruption in Linux while calling system configuration APIs.
Memory corruption in Video while calling APIs with different instance ID than the one received in initialization.
Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client.
Memory corruption in Linux when the file upload API is called with parameters having large buffer.
An app with non-privileged access can change global system brightness and cause undesired system behavior.
Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions.
Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.
Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.
Memory Corruption in Audio while allocating the ion buffer during the music playback.
Memory Corruption in WLAN HOST while parsing QMI response message from firmware.
Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message.
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data.
Memory Corruption in WLAN HOST while fetching TX status information.
Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.
Information disclosure in DSP Services while loading dynamic module.
Memory corruption in Automotive GPU while querying a gsl memory node.
Memory corruption in WLAN HOST while receiving an WMI event from firmware.
Memoru corruption in Audio when ADSP sends input during record use case.
Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode.
Transient DOS in WLAN Firmware while processing the received beacon or probe response frame.
Transient DOS in WLAN Firmware while processing frames with missing header fields.
Transient DOS in WLAN Firmware while parsing FT Information Elements.
Transient DOS while parsing WLAN beacon or probe-response frame.
Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.
Memory corruption due to double free in Core while mapping HLOS address to the list.
Memory corruption in Linux Networking due to double free while handling a hyp-assign.