Qualcomm ≫ Ssg2115p Firmware

Memory corruption while power-up or power-down sequence of the camera sensor.

Information disclosure while parsing the OCI IE with invalid length.

Memory corruption during management frame processing due to mismatch in T2LM info element.

Memory corruption while configuring a Hypervisor based input virtual device.

Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it for a process-specific task, issues may arise.

Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,

Memory corruption while invoking IOCTL calls to unmap the DMA buffers.

Memory corruption while Configuring the SMR/S2CR register in Bypass mode.

Memory corruption when allocating and accessing an entry in an SMEM partition continuously.

Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present.