Qualcomm

Memory corruption while using alignments for memory allocation.

Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.

Memory corruption while using Strongbox due to buffer overflow.

Memory corruption while using Strongbox due to missing bounds check.

Transient DOS when processing authentication frames with invalid FILS information element header lengths.

Transient DOS when processing a continuous receive command with a zero-sized global configuration override.

Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.

Memory corruption when processing draw objects of incorrect type during graphics command list execution.

Memory Corruption when copying data from a freed source while executing performance counter deselect operation.

Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input due to accessing already freed memory.

Memory Corruption when invoking device input/output control operations for mapping and unmapping persistent memory buffers due to improper synchronization.

Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization.

Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.

Memory Corruption when adding user-supplied data without checking available buffer space.

Memory corruption while processing a frame request from user.

Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.

Memory Corruption when accessing trusted execution environment without proper privilege check.

Memory Corruption when accessing buffers with invalid length during TA invocation.

Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.

Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.

Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.

Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.

Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.

Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans.

Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input.