qualcomm / lemansau_firmware CVEs

Memory corruption while processing a packet with a size close to the maximum allowed value.

Memory Corruption when updating prepared commands with invalid port indices based on user space input exceeds supported read client limits.

Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security.

Memory Corruption when validating input batch size and buffer plane count exceeds maximum allowed values.

Memory Corruption when adding user-supplied data without checking available buffer space.

Memory Corruption while processing IOCTL calls when concurrent access to shared buffer occurs.

Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.

Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls.

Memory Corruption when accessing buffers with invalid length during TA invocation.

Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.