qualcomm / msm8209_firmware CVEs

Memory corruption while processing API calls to NPU with invalid input.

Memory corruption when user provides data for FM HCI command control operations.

Transient DOS while handling PS event when Program Service name length offset value is set to 255.

Memory corruption when Alternative Frequency offset value is set to 255.

Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem.

Memory Corruption in Audio while playing amrwbplus clips with modified content.

Information disclosure in Network Services due to buffer over-read while the device receives DNS response.

Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool.

Information disclosure due to buffer over-read in Bluetooth HOST while processing GetFolderItems and GetItemAttribute Cmds from peer device.

Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote

Denial of service while processing fastboot flash command on mmc due to buffer over read

Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile…

Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Sn…

Information disclosure due to exposure of information while GPU reads the data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…

u'When a non standard SIP sigcomp message is received from the network, then there may be chances of using more UDVM cycle or memory overflow' in Snapdragon Auto, Snapdragon Compu…