qualcomm / mdm9628 CVEs

Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.

Memory corruption while sound model registration for voice activation with audio kernel driver.

Information disclosure while parsing the OCI IE with invalid length.

Transient DOS while parsing the MBSSID IE from the beacons when IE length is 0.

Transient DOS while parsing ESP IE from beacon/probe response frame.

Information disclosure while parsing the multiple MBSSID IEs from the beacon.

Memory corruption while processing IOCTL call for getting group info.

Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released.

Memory corruption while creating a fence to wait on timeline events, and simultaneously signal timeline events.

Memory corruption while allocating memory in HGSL driver.

Memory corruption while processing IOCTL call to set metainfo.

Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.

Memory corruption while processing a QMI request for allocating memory from a DHMS supported subsystem.

Memory corruption while invoking IOCTLs calls in Automotive Multimedia.

Memory corruption while invoking HGSL IOCTL context create.

Memory corruption in Audio while processing the calibration data returned from ACDB loader.

Memory corruption in Audio while processing IIR config data from AFE calibration block.

Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points.

Transient DOS in Audio when invoking callback function of ASM driver.

Memory corruption in WLAN HOST while processing the WLAN scan descriptor list.

Memory corruption while processing audio effects.

Memory corruption in Audio during playback session with audio effects enabled.

Transient DOS in Audio while remapping channel buffer in media codec decoding.

Memory Corruption in Audio while playing amrwbplus clips with modified content.

Memory corruption in WLAN while running doDriverCmd for an unspecific command.