qualcomm / snapdragon_8cx_gen_3_compute_platform CVEs

Memory Corruption when retrieving output buffer with insufficient size validation.

Memory corruption while preprocessing IOCTL request in JPEG driver.

Memory Corruption when user space address is modified and passed to mem_free API, causing kernel memory to be freed inadvertently.

Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver.

Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice.

Memory corruption while station LL statistic handling.

Memory corruption when negative display IDs are sent as input while processing DISPLAYESCAPE event trigger.

Memory corruption while reading ACPI config through the user mode app.