qualcomm / snapdragon_8_gen_1_firmware CVEs

Memory corruption caused by missing locks and checks on the DMA fence and improper synchronization.

Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.

Memory corruption while processing camera use case IOCTL call.

Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE.

In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used. So when a function called cam_mem_get_cpu_buf to get the kernel va to use, a…

The buffer obtained from kernel APIs such as cam_mem_get_cpu_buf() may be readable/writable in userspace after kernel accesses it. In other words, user mode may race and modify th…

An app with non-privileged access can change global system brightness and cause undesired system behavior.

Memory corruption in Linux when the file upload API is called with parameters having large buffer.