qualcomm / mdm9628_firmware CVEs

Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.

Memory corruption while sound model registration for voice activation with audio kernel driver.

While processing the authentication message in UE, improper authentication may lead to information disclosure.

Information disclosure while parsing the OCI IE with invalid length.

Transient DOS while parsing the MBSSID IE from the beacons when IE length is 0.

Transient DOS while parsing ESP IE from beacon/probe response frame.

Information disclosure while parsing the multiple MBSSID IEs from the beacon.

Memory corruption while processing IOCTL call for getting group info.

Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released.

Memory corruption while creating a fence to wait on timeline events, and simultaneously signal timeline events.

Memory corruption while allocating memory in HGSL driver.

Memory corruption while processing IOCTL call to set metainfo.

Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.

Memory corruption while processing a QMI request for allocating memory from a DHMS supported subsystem.

Memory corruption while invoking IOCTLs calls in Automotive Multimedia.

Memory corruption while invoking HGSL IOCTL context create.

Memory corruption in Audio while processing the calibration data returned from ACDB loader.

Memory corruption in Audio while processing IIR config data from AFE calibration block.

Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points.

Transient DOS in Audio when invoking callback function of ASM driver.

Memory corruption in WLAN HOST while processing the WLAN scan descriptor list.

Memory corruption while processing audio effects.

Transient DOS in WLAN Host when an invalid channel (like channel out of range) is received in STA during CSA IE.

Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel in CSA IE.

Memory corruption in Audio during playback session with audio effects enabled.