Memory corruption while handling buffer mapping operations in the cryptographic driver.
Memory corruption while processing MFC channel configuration during music playback.
Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.
Memory corruption while processing a malformed license file during reboot.
Transient DOS while parsing the EPTM test control message to get the test pattern.
Memory corruption while selecting the PLMN from SOR failed list.
Cryptographic issue while performing RSA PKCS padding decoding.
Memory corruption while performing private key encryption in trusted application.
Transient DOS while processing an ANQP message.
Memory corruption while handling client exceptions, allowing unauthorized channel access.
Transient DOS while processing CCCH data when NW sends data with invalid length.
Information disclosure while processing the hash segment in an MBN file.
Information disclosure while reading data from an image using specified offset and size parameters.
Transient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE network.
Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
Memory corruption while processing video packets received from video firmware.
Cryptographic issue occurs due to use of insecure connection method while downloading.
Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.
Transient DOS may occur while parsing SSID in action frames.
Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.
There may be information disclosure during memory re-allocation in TZ Secure OS.
Memory corruption while calling the NPU driver APIs concurrently.
Memory corruption may occur while validating ports and channels in Audio driver.
Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
Memory corruption while Configuring the SMR/S2CR register in Bypass mode.
Memory corruption while processing voice packet with arbitrary data received from ADSP.
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.
Memory corruption while processing concurrent IOCTL calls.
Memory corruption when two threads try to map and unmap a single node simultaneously.
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.
memory corruption when an invalid firehose patch command is invoked.
Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network.
Transient DOS while parsing ESP IE from beacon/probe response frame.
Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.
Transient DOS when NAS receives ODAC criteria of length 1 and type 1 in registration accept OTA.
Transient DOS while loading the TA ELF file.
Memory corruption while performing finish HMAC operation when context is freed by keymaster.
Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.
Memory corruption when the payload received from firmware is not as per the expected protocol size.
Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received.
Memory corruption when there is failed unmap operation in GPU.
Transient DOS while processing DL NAS TRANSPORT message with payload length 0.
Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR.
Memory corruption while processing finish_sign command to pass a rsp buffer.
Memory corruption in SPS Application while requesting for public key in sorter TA.
Transient DOS while processing PDU Release command with a parameter PDU ID out of range.
Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16.
Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR.