Memory corruption during the image encoding process.
Memory corruption while processing event close when client process terminates abruptly.
Memory corruption while processing the TESTPATTERNCONFIG escape path.
Memory corruption while processing multiple simultaneous escape calls.
Memory corruption while processing a private escape command in an event trigger.
Transient DOS while processing received beacon frame.
Transient DOS may occur while processing malformed length field in SSID IEs.
Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.
Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.
Memory corruption while retrieving the CBOR data from TA.
Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses.
Memory corruption while operating the mailbox in Automotive.
Memory corruption while processing escape code, when DisplayId is passed with large unsigned value.
Memory corruption while processing image encoding, when configuration is NULL in IOCTL parameter.
Memory corruption while processing image encoding, when input buffer length is 0 in IOCTL call.
Memory corruption during the FRS UDS generation process.
Memory corruption while triggering commands in the PlayReady Trusted application.
Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions.
Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling.
Transient DOS during hypervisor virtual I/O operation in a virtual machine.
Memory corruption may occour while generating test pattern due to negative indexing of display ID.
Memory corruption while handling IOCTL call from user-space to set latency level.
Memory corruption while taking a snapshot with hardware encoder due to unvalidated userspace buffer.
Memory corruption while configuring a Hypervisor based input virtual device.
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.
Memory corruption when IOCTL call is invoked from user-space to read board data.
Memory corruption while creating a LPAC client as LPAC engine was allowed to access GPU registers.
Memory corruption in Hypervisor when platform information mentioned is not aligned.
Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked.
Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization.
Memory corruption when the channel ID passed by user is not validated and further used.
Memory corruption when size of buffer from previous call is used without validation or re-initialization.
Memory corruption in HLOS while checking for the storage type.
Memory corruption while loading a VM from a signed VM image that is not coherent in the processor cache.
Memory corruption while allocating memory for graphics.
Memory corruption while processing buffer initialization, when trusted report for certain report types are generated.
Memory corruption while processing finish_sign command to pass a rsp buffer.
Memory corruption in SPS Application while requesting for public key in sorter TA.
Memory corruption while invoking the SubmitCommands call on Gfx engine during the graphics render.
Memory corruption in Core Services while executing the command for removing a single event listener.