Vulnerabilidades

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.

Cryptographic issue while performing RSA PKCS padding decoding.

Memory corruption while processing simultaneous requests via escape path.

Memory corruption while processing IOCTL command with larger buffer in Bluetooth Host.

Transient DOS while processing an ANQP message.

Memory corruption while handling client exceptions, allowing unauthorized channel access.

Transient DOS while processing CCCH data when NW sends data with invalid length.

Memory corruption while processing commands from A2dp sink command queue.

Information disclosure while processing the hash segment in an MBN file.

Information disclosure while reading data from an image using specified offset and size parameters.

Memory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently.

Transient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE network.

Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.

Transient DOS while handling beacon frames with invalid IE header length.

Memory corruption during the image encoding process.

Memory corruption while processing data packets in diag received from Unix clients.

Memory corruption while processing event close when client process terminates abruptly.

Memory corruption while processing the TESTPATTERNCONFIG escape path.

Memory corruption while processing multiple simultaneous escape calls.

Memory corruption while processing manipulated payload in video firmware.

Memory corruption while processing video packets received from video firmware.

Memory corruption while processing a private escape command in an event trigger.

Transient DOS while processing received beacon frame.

Cryptographic issue occurs due to use of insecure connection method while downloading.

Transient DOS may occur while processing malformed length field in SSID IEs.