qualcomm / sa8150p CVEs

Memory Corruption when copying data from a freed source while executing performance counter deselect operation.

Memory corruption while handling different IOCTL calls from the user-space simultaneously.

Memory corruption while processing a secure logging command in the trusted application.

Memory corruption while handling buffer mapping operations in the cryptographic driver.

Information disclosure while exposing internal TA-to-TA communication APIs to HLOS

Memory corruption may occur while processing voice call registration with user.

Information disclosure while processing information on firmware image during core initialization.

Memory corruption while sending the persist buffer command packet from the user-space to the kernel space through the IOCTL call.

Memory corruption when IPv6 prefix timer object`s lifetime expires which are created while Netmgr daemon gets an IPv6 address.

Memory corruption in Automotive OS whenever untrusted apps try to access HAb for graphics functionalities.

Memory Corruption in VR Service while sending data using Fast Message Queue (FMQ).

Memory Corruption while accessing metadata in Display.

Memory corruption in Audio while validating and mapping metadata.

An app with non-privileged access can change global system brightness and cause undesired system behavior.

Transient DOS due to uncontrolled resource consumption in Linux kernel when malformed messages are sent from the Gunyah Resource Manager message queue.

Memory corruption in Audio due to incorrect type cast during audio use-cases.

Memory corruption in HAB Memory management due to broad system privileges via physical address.

Memory corruption due to incorrect type conversion or cast in audio while using audio playback/capture when crafted address is sent from AGM IPC to AGM.

Memory corruption in Automotive Android OS due to improper validation of array index.

Transient Denial-of-service in Automotive due to improper input validation while parsing ELF file.

Memory corruption in android core due to improper validation of array index while returning feature ids after license authentication.

Memory corruption in multimedia due to incorrect type conversion while adding data in Snapdragon Auto

Denial of service in multimedia due to uncontrolled resource consumption while parsing an incoming HAB message in Snapdragon Auto

Memory corruption in multimedia due to improper check on received export descriptors in Snapdragon Auto

Improper handling of sensor HAL structure in absence of sensor can lead to use after free in Snapdragon Auto