Improper Input Validation in WLAN Resource Manager

Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call

Memory corruption in Modem while processing security related configuration before AS Security Exchange

Stack-based Buffer Overflow in WLAN Firmware

Cryptographic Issues in BT Controller

Information disclosure in Modem while processing SIB5

Integer Overflow or Wraparound in GPS

Buffer Copy Without Checking Size of Input in Hypervisor

Buffer Over-read in WLAN Host Communication

Missing Authentication for Critical Function in Data Modem

Improper Access Control in Automotive Multimedia

Detection of Error Condition Without Action in Hypervisor

Buffer Copy Without Checking Size of Input in Graphics Linux

Use After Free in Computer Vision

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive

Stack-based Buffer Overflow in PMIC

Memory corruption in core services when Diag handler receives a command to configure event listeners

Memory Corruption in Core while invoking a call to Access Control core library with hardware protected address range

Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key

Exposure of Sensitive System Information to an Unauthorized Control Sphere in KERNEL

Buffer Over-read in WLAN Host Communication

Buffer Over-read in WLAN Host Communication

Buffer Over-read in WLAN Host

Buffer Over-read in WLAN Host

Buffer Over-read in WLAN Host

Buffer Over-read in Multi Mode Call Processor

Loop with Unreachable Exit Condition (`Infinite Loop`) in Multi Mode Call Processor

Buffer Over-read in WLAN Host Communication

Buffer Over-read in WLAN HOST

Transient DOS in Modem when a Beam switch request is made with a non-configured BWP

Transient DOS in Modem after RRC Setup message is received

Transient DOS in Modem while triggering a camping on an 5G cell

Transient DOS in Audio while remapping channel buffer in media codec decoding

Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network

Transient DOS due to reachable assertion in Modem because of invalid network configuration

Assertion occurs while processing Reconfiguration message due to improper validation

Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported

Transient DOS due to reachable assertion in Modem during OSI decode scheduling

Stack-based Buffer Overflow in Display

Cryptographic Issues in Core

Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation

Information disclosure in Core services while processing a Diag command

Improper Access Control for Register Interface in TZ Firmware

Use After Free in WLAN Host Communication

Reachable Assertion in Modem

Buffer Over-read in Video

Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message

Information Exposure in Computer Vision