qualcomm / wsa8832_firmware CVEs

Information Disclosure when resetting device to factory default settings through powerline interface allows unauthorized access to device configuration.

Memory corruption while processing IOCTL command when device is in power-save state.

Memory Corruption when using deprecated DMABUF IOCTL calls to manage video memory.

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.

Memory corruption while processing a frame request from user.

Memory corruption while performing sensor register read operations.

Memory corruption may occur while processing IOCTL call for DMM/WARPNCC CONFIG request.

Memory corruption while processing camera TPG write request.

Memory corruption while acquire and update IOCTLs during IFE output resource ID validation.

Memory corruption Camera kernel when large number of devices are attached through userspace.

Memory corruption due to improper bounds check while command handling in camera-kernel driver.

Memory corruption while encoding JPEG format.

Memory corruption while handling schedule request in Camera Request Manager(CRM) due to invalid link count in the corresponding session.

Memory corruption caused by missing locks and checks on the DMA fence and improper synchronization.

Memory corruption while processing camera use case IOCTL call.

Memory corruption during GNSS HAL process initialization.

Memory corruption while processing voice packet with arbitrary data received from ADSP.

Memory corruption while processing GPU commands.

Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.

Memory corruption while handling session errors from firmware.

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.

Transient DOS while processing the CU information from RNR IE.

Transient DOS while parsing BTM ML IE when per STA profile is not included.

Transient DOS while parsing fragments of MBSSID IE from beacon frame.