Memory corruption in Audio while processing the VOC packet data from ADSP.
Memory corruption when resource manager sends the host kernel a reply message with multiple fragments.
Memory corruption in Audio during playback with speaker protection.
Memory corruption in Audio while processing RT proxy port register driver.
Memory corruption in Core when updating rollback version for TA and OTA feature is enabled.
Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.
Memory corruption while parsing the ADSP response command.
Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,
Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access.
Memory Corruption in Audio while invoking callback function in driver from ADSP.
Memory corruption in TZ Secure OS while requesting a memory allocation from TA region.
Memory corruption while receiving a message in Bus Socket Transport Server.
Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation.
Memory corruption in HLOS while running playready use-case.
Memory corruption in Audio when SSR event is triggered after music playback is stopped.
Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.
Memory corruption in Audio while running invalid audio recording from ADSP.
Memory corruption when user provides data for FM HCI command control operations.
Memory corruption when BTFM client sends new messages over Slimbus to ADSP.
Memory corruption in WLAN handler while processing PhyID in Tx status handler.
Memory corruption in Core Services while executing the command for removing a single event listener.
Memory corruption in TZ Secure OS while loading an app ELF.
Memory corruption while allocating memory in COmxApeDec module in Audio.
Memory corruption in WLAN HAL while passing command parameters through WMI interfaces.
Memory corruption in core services when Diag handler receives a command to configure event listeners.
Memory corruption while processing audio effects.
Memory corruption in WLAN HAL while handling command streams through WMI interfaces.
Memory corruption in MPP performance while accessing DSM watermark using external memory address.
Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache.
Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload.
Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level.
Memory corruption in WLAN HAL while parsing WMI command parameters.
The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handle is passed to it.
Memory corruption in WLAN HAL while handling command through WMI interfaces.
Memory corruption in SPS Application while requesting for public key in sorter TA.
Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.
Memory Corruption in WLAN HOST while parsing QMI response message from firmware.
Memory Corruption in HLOS while registering for key provisioning notify.
Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message.
Memory Corruption in Core due to secure memory access by user while loading modem image.
Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length.
Memory corruption in Automotive GPU while querying a gsl memory node.
Memory Corruption in VR Service while sending data using Fast Message Queue (FMQ).
Memory corruption in Linux while calling system configuration APIs.
Memory corruption in RIL while trying to send apdu packet.
Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
Memory Corruption while accessing metadata in Display.
Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.
Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM.