Vulnerabilidades

Memory corruption while routing GPR packets between user and root when handling large data packet.

Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.

Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing.

Memory corruption while accessing a buffer during IOCTL processing.

Memory corruption while performing encryption and decryption commands.

Memory corruption while invoking remote procedure IOCTL calls.

Memory corruption while processing an escape call.

memory corruption while processing an image encoding completion event.

Memory corruption while processing IOCTL call to get the mapping.

Memory corruption while processing escape commands from userspace.

Memory corruption while processing a malformed license file during reboot.

Memory corruption during PlayReady APP usecase while processing TA commands.

Transient DOS while processing IOCTL call for image encoding.

Memory corruption while processing camera platform driver IOCTL calls.

Information disclosure while processing batch command execution in Video driver.

Memory corruption while encoding the image data.

Memory corruption due to double free when multiple threads race to set the timestamp store.

memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.

Memory corruption while performing private key encryption in trusted application.

Information disclosure when Video engine escape input data is less than expected minimum size.

Cryptographic issue while performing RSA PKCS padding decoding.

Memory corruption while processing simultaneous requests via escape path.

Memory corruption while processing IOCTL command with larger buffer in Bluetooth Host.

Transient DOS while creating NDP instance.

Memory corruption while processing DDI command calls.