Memory corruption while processing identity credential operations in the trusted application.

Memory Corruption when processing IOCTLs for JPEG data without verification.

Memory corruption while routing GPR packets between user and root when handling large data packet.

Memory corruption while accessing a buffer during IOCTL processing.

Memory corruption while performing encryption and decryption commands.

Memory corruption while invoking remote procedure IOCTL calls.

memory corruption while processing an image encoding completion event.

Memory corruption while processing a malformed license file during reboot.

Memory corruption during PlayReady APP usecase while processing TA commands.

Transient DOS while processing IOCTL call for image encoding.

Memory corruption while encoding the image data.

Transient DOS while parsing the EPTM test control message to get the test pattern.

Memory corruption due to double free when multiple threads race to set the timestamp store.

Information disclosure when Video engine escape input data is less than expected minimum size.

memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.

Cryptographic issue while performing RSA PKCS padding decoding.

Memory corruption while performing private key encryption in trusted application.

Memory corruption while processing simultaneous requests via escape path.

Memory corruption while processing IOCTL command with larger buffer in Bluetooth Host.

Memory corruption while processing an IOCTL command with an arbitrary address.

Transient DOS while processing an ANQP message.

Information disclosure while processing the hash segment in an MBN file.

Information disclosure while reading data from an image using specified offset and size parameters.

memory corruption while processing IOCTL commands, when the buffer in write loopback mode is accessed after being freed.

Memory corruption may occur while attaching VM when the HLOS retains access to VM.

Transient DOS may occur while parsing SSID in action frames.

Memory corruption while IOCTL call is invoked from user-space to read board data.

Memory corruption occurs when handling client calls to EnableTestMode through an Escape call.

Memory corruption while processing escape code in API.

Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass.

Information disclosure while creating MQ channels.

Cryptographic issues while generating an asymmetric key pair for RKP use cases.

There may be information disclosure during memory re-allocation in TZ Secure OS.

Memory corruption while assigning memory from the source DDR memory(HLOS) to ADSP.

Memory corruption while taking snapshot when an offset variable is set by camera driver.

memory corruption when an invalid firehose patch command is invoked.

Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element (IE) of a beacon frame that is received from over-the-air (OTA).

Cryptographic issue while parsing RSA keys in COBR format.

Memory corruption during session sign renewal request calls in HLOS.

Memory corruption when keymaster operation imports a shared key.

Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager.