Vulnerabilidades

Transient DOS when an LTE RLC packet with invalid TB is received by UE.

Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.

Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.

Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.

Memory corruption while processing identity credential operations in the trusted application.

Memory corruption while handling sensor utility operations.

Memory corruption while processing shared command buffer packet between camera userspace and kernel.

Memory corruption while handling buffer mapping operations in the cryptographic driver.

Information disclosure while processing a firmware event.

Transient DOS while parsing video packets received from the video firmware.

Memory corruption while handling IOCTL calls to set mode.

Memory corruption while copying packets received from unix clients.

Memory corruption while processing MFC channel configuration during music playback.

Memory corruption during video playback when video session open fails with time out error.

Memory corruption while routing GPR packets between user and root when handling large data packet.

Memory corruption while processing a GP command response.

Memory corruption while processing a malformed license file during reboot.

Transient DOS while processing video packets received from video firmware.

Transient DOS while parsing the EPTM test control message to get the test pattern.

Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.

Memory corruption while performing private key encryption in trusted application.

Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.

Cryptographic issue while performing RSA PKCS padding decoding.