Qualcomm

Memory corruption while handling concurrent memory mapping and unmapping requests from a user-space application.

Memory corruption while routing GPR packets between user and root when handling large data packet.

Memory corruption while handling IOCTL calls to set mode.

Memory corruption while copying packets received from unix clients.

Memory corruption while processing MFC channel configuration during music playback.

Memory corruption during video playback when video session open fails with time out error.

Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing.

Memory corruption while accessing a buffer during IOCTL processing.

Memory corruption while processing large input data from a remote source via a communication interface.

Memory corruption when triggering a subsystem crash with an out-of-range identifier.

Memory corruption while processing client message during device management.

Memory corruption while processing request sent from GVM.

Memory corruption while processing audio streaming operations.

Memory corruption while performing encryption and decryption commands.

Memory corruption while invoking remote procedure IOCTL calls.

Memory corruption while allocating buffers in DSP service.

Memory corruption while processing user buffers.

Memory corruption while processing an escape call.

Memory corruption while processing control commands in the virtual memory management interface.

memory corruption while processing an image encoding completion event.

Memory corruption while processing IOCTL call to get the mapping.

Memory corruption while processing escape commands from userspace.

Memory corruption while processing a malformed license file during reboot.

Memory corruption during PlayReady APP usecase while processing TA commands.

Memory corruption while processing camera platform driver IOCTL calls.

Dell Wireless 5932e and Qualcomm Snapdragon X62 Firmware and GNSS/GPS Driver, versions prior to 3.2.0.22 contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code Execution.

Memory corruption while handling invalid inputs in application info setup.

Memory corruption while encoding the image data.

Memory corruption due to global buffer overflow when a test command uses an invalid payload type.

Memory corruption due to double free when multiple threads race to set the timestamp store.

Memory corruption while handling repeated memory unmap requests from guest VM.

Memory corruption while processing data sent by FE driver.

Memory corruption while processing message in guest VM.

Memory corruption while processing config_dev IOCTL when camera kernel driver drops its reference to CPU buffers.

memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.

Memory corruption while performing private key encryption in trusted application.

Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake.

Memory corruption while processing simultaneous requests via escape path.

Memory corruption while processing IOCTL command with larger buffer in Bluetooth Host.

Memory corruption while processing DDI command calls.

Memory corruption while processing an IOCTL command with an arbitrary address.

Memory corruption while processing DDI call with invalid buffer.

Memory corruption while handling client exceptions, allowing unauthorized channel access.

Memory corruption while processing commands from A2dp sink command queue.

Memory corruption when using Virtual cdm (Camera Data Mover) to write registers.

Memory corruption when programming registers through virtual CDM.

Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously.

Memory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently.

Memory corruption while submitting blob data to kernel space though IOCTL.

Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.