qualcomm / sm8750p CVEs

Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.

Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow.

Memory corruption while using alignments for memory allocation.

Memory Corruption when accessing trusted execution environment without proper privilege check.

Transient DOS when processing a received frame with an excessively large authentication information element.

Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.

Memory corruption while allocating buffers in DSP service.

Memory corruption while processing user buffers.

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.

Memory corruption during sub-system restart while processing clean-up to free up resources.

Transient DOS may occur while processing malformed length field in SSID IEs.

Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.

Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC.

Memory corruption while decoding of OTA messages from T3448 IE.

Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads.

Information disclosure while creating MQ channels.

Transient DOS can occur while processing UCI command.

Memory corruption may occur during the synchronization of the camera`s frame processing pipeline.

Memory corruption while handling multuple IOCTL calls from userspace for remote invocation.

Memory corruption in Camera due to unusually high number of nodes passed to AXI port.

Memory corruption when invalid input is passed to invoke GPU Headroom API call.