Qualcomm

Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapd…

Possible use after free due to improper handling of memory mapping of multiple processes simultaneously.

Memory corruption while using alignments for memory allocation.

Memory corruption while maintaining memory maps of HLOS memory.

Memory corruption in DSP Services during a remote call from HLOS to DSP.

Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…

Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.

Improper handling of address deregistration on failure can lead to new GPU address allocation failure.

Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Ele…

Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics C…

Memory corruption while parsing the ML IE due to invalid frame content.

Memory corruption in WLAN Host while processing RRM beacon on the AP.

Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute.

Memory corruption in WLAN Firmware while doing a memory copy of pmk cache.

Memory corruption in Modem while processing security related configuration before AS Security Exchange.

Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length.

Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote

Memory corruption while selecting the PLMN from SOR failed list.

Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.

Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE.

Memory corruption while processing MBSSID beacon containing several subelement IE.