Vulnerabilidades

Memory Corruption when processing IOCTLs for JPEG data without verification.

Memory corruption during PlayReady APP usecase while processing TA commands.

Memory corruption while performing private key encryption in trusted application.

Memory corruption while processing simultaneous requests via escape path.

Memory corruption while processing an IOCTL command with an arbitrary address.

Transient DOS while processing an ANQP message.

Information disclosure while processing the hash segment in an MBN file.

Information disclosure while reading data from an image using specified offset and size parameters.

Memory corruption while processing event close when client process terminates abruptly.

Memory corruption while processing multiple simultaneous escape calls.

Transient DOS while processing received beacon frame.

Transient DOS may occur while processing malformed length field in SSID IEs.

Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.

Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.

Memory corruption while IOCTL call is invoked from user-space to read board data.

Memory corruption occurs when handling client calls to EnableTestMode through an Escape call.

Memory corruption while processing escape code in API.

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.

Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver.

Memory corruption while handling IOCTL calls in JPEG Encoder driver.

Memory corruption while taking snapshot when an offset variable is set by camera driver.

memory corruption when an invalid firehose patch command is invoked.

Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.

Memory corruption while processing key blob passed by the user.

Transient DOS while loading the TA ELF file.