qualcomm / video_collaboration_vc3_platform_firmware CVEs

Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling.

Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input.

Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input due to accessing already freed memory.

Memory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications.

Memory corruption while processing multiple IOCTL command for escape operations.

Memory corruption while processing fastboot OEM commands.

Memory Corruption when output buffer size is smaller than input buffer size during data copying operation.

Memory corruption in windows drivers while sending incorrect trusted application request

Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.

Memory corruption while preprocessing IOCTL request in JPEG driver.

Transient DOS when MAC configures config id greater than supported maximum value.

Memory corruption occurs when a secure application is launched on a device with insufficient memory.

Memory corruption while passing pages to DSP with an unaligned starting address.

Memory corruption while processing a video session to set video parameters.

Memory corruption during video playback when video session open fails with time out error.

Memory corruption while accessing a buffer during IOCTL processing.

memory corruption while processing an image encoding completion event.

Transient DOS while processing IOCTL call for image encoding.

Information disclosure when Video engine escape input data is less than expected minimum size.

Memory corruption while processing the TESTPATTERNCONFIG escape path.

memory corruption while processing IOCTL commands, when the buffer in write loopback mode is accessed after being freed.

Memory corruption may occur while processing voice call registration with user.

Memory corruption while processing image encoding, when input buffer length is 0 in IOCTL call.

Memory corruption may occur during IO configuration processing when the IO port count is invalid.

Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer.