qualcomm / qam8620p_firmware CVEs

Memory corruption while processing a packet with a size close to the maximum allowed value.

Memory corruption while calculating offset from partition start point.

Memory corruption when calculating oversized partition sizes without proper checks.

Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication.

Memory corruption while routing GPR packets between user and root when handling large data packet.

Memory corruption while processing large input data from a remote source via a communication interface.

Information disclosure while processing message from client with invalid payload.

Memory corruption when triggering a subsystem crash with an out-of-range identifier.

Memory corruption while processing client message during device management.

Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions.

Memory corruption while processing control commands in the virtual memory management interface.

Memory corruption during PlayReady APP usecase while processing TA commands.

Memory corruption while handling repeated memory unmap requests from guest VM.

Memory corruption while processing data sent by FE driver.

Memory corruption while processing message in guest VM.

Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.

Information disclosure while processing a packet at EAVB BE side with invalid header length.

Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.

Memory corruption while copying the result to the transmission queue which is shared between the virtual machine and the host.

Memory corruption while copying the result to the transmission queue in EMAC.

Memory corruption while retrieving the CBOR data from TA.

Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses.

Memory corruption while processing a message, when the buffer is controlled by a Guest VM, the value can be changed continuously.

Transient DOS while parsing per STA profile in ML IE.

Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions.