qualcomm / sa8775p CVEs

Memory corruption while processing a secure logging command in the trusted application.

Memory corruption while processing shared command buffer packet between camera userspace and kernel.

Memory corruption while processing a malformed license file during reboot.

Memory corruption while processing manipulated payload in video firmware.

Transient DOS while processing received beacon frame.

Memory corruption may occur while attaching VM when the HLOS retains access to VM.

Memory corruption may occur in keyboard virtual device due to guest VM interaction.

Memory corruption while reading a type value from a buffer controlled by the Guest Virtual Machine.

Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.

Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service.

Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playback and record.

transient DOS when setting up a fence callback to free a KGSL memory entry object during DMA.

Memory corruption in Audio during a playback or a recording due to race condition between allocation and deallocation of graph object.