Qualcomm ≫ Snapdragon Xr2 5g Platform Firmware

Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.

Memory Corruption when processing device identifier strings that exceed the expected maximum length.

Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.

Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.

Memory corruption while using alignments for memory allocation.

Memory Corruption when adding user-supplied data without checking available buffer space.

Memory Corruption when processing invalid user address with nonstandard buffer address.

Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs.

Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources.

Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.