Double Free in Modem
Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.
Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.
Information disclosure in Video while parsing mp2 clip with invalid section length.
Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan.
Memory corruption when the IOCTL call is interrupted by a signal.
Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size.
Memory corruption while verifying the serialized header when the key pairs are generated.
Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers.
Transient DOS may occur while processing the country IE.
Memory corruption in Audio while processing RT proxy port register driver.
Information disclosure in WLAN HAL while handling command through WMI interfaces.
Memory corruption while processing MBSSID beacon containing several subelement IE.
Memory corruption while processing audio effects.
Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command.
Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time.
Memory corruption while processing data packets in diag received from Unix clients.
Information Disclosure in Qualcomm IPC while reading values from shared memory in VM.
Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame.
Memory corruption while running VK synchronization with KASAN enabled.
Information disclosure in WLAN HAL while handling the WMI state info command.