Qualcomm ≫ Snapdragon Xr2 5g Platform Firmware

Memory Corruption when output buffer size is smaller than input buffer size during data copying operation.

Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.

Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.

Memory Corruption when processing device identifier strings that exceed the expected maximum length.

Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.

Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.

Memory corruption while using alignments for memory allocation.

Memory Corruption when adding user-supplied data without checking available buffer space.

Memory Corruption when processing invalid user address with nonstandard buffer address.

Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs.