Memory Corruption when processing IOCTLs for JPEG data without verification.
Memory corruption while processing MFC channel configuration during music playback.
Memory corruption while copying packets received from unix clients.
Memory corruption while handling IOCTL calls to set mode.
Memory corruption while routing GPR packets between user and root when handling large data packet.
Information disclosure while processing system calls with invalid parameters.
Memory corruption during video playback when video session open fails with time out error.
Information disclosure while exposing internal TA-to-TA communication APIs to HLOS
Memory corruption while processing large input data from a remote source via a communication interface.
Memory corruption while accessing a buffer during IOCTL processing.
Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing.
Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.
Information disclosure while processing message from client with invalid payload.
Memory corruption while processing a GP command response.
Memory corruption while processing audio streaming operations.
Memory corruption while processing request sent from GVM.
Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions.
Memory corruption while processing client message during device management.
Memory corruption when triggering a subsystem crash with an out-of-range identifier.
Memory corruption while performing encryption and decryption commands.
Information disclosure while registering commands from clients with diag through diagHal.
Memory corruption while processing an escape call.
Memory corruption while processing user buffers.
Memory corruption while allocating buffers in DSP service.
Memory corruption while invoking remote procedure IOCTL calls.
memory corruption while processing an image encoding completion event.
Memory corruption while processing control commands in the virtual memory management interface.
Transient DOS may occur when multi-profile concurrency arises with QHS enabled.
Memory corruption while performing SCM call.
Memory corruption while performing SCM call with malformed inputs.