qualcomm / snapdragon_460_mobile_platform_firmware CVEs

Memory Corruption when parsing jpeg commands due to unaccounted extra writes to the buffer during validation checks.

Memory corruption while processing multiple IOCTL command for escape operations.

Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow.

Memory Corruption when output buffer size is smaller than input buffer size during data copying operation.

Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation.

Memory Corruption when retrieving output buffer with insufficient size validation.

Memory corruption while using alignments for memory allocation.

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.

The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race conditi…