CVE-2024-33065

Memory corruption while taking snapshot when an offset variable is set by camera driver.

CVE-2025-21421

Memory corruption while processing escape code in API.

CVE-2025-21441

Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.

CVE-2025-21423

Memory corruption occurs when handling client calls to EnableTestMode through an Escape call.

CVE-2025-21440

Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.

CVE-2024-23353

Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.

CVE-2025-27068

Memory corruption while processing an IOCTL command with an arbitrary address.

CVE-2025-27076

Memory corruption while processing simultaneous requests via escape path.