Qualcomm ≫ Sa8255p Firmware

Information Disclosure while parsing beacon frame in STA.

INformation disclosure while handling Multi-link IE in beacon frame.

Information disclosure while handling SA query action frame.

transient DOS when setting up a fence callback to free a KGSL memory entry object during DMA.

Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked.

Memory corruption in Audio during a playback or a recording due to race condition between allocation and deallocation of graph object.

Memory corruption when IPC callback handle is used after it has been released during register callback by another thread.

Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization.

Memory corruption while playing audio file having large-sized input buffer.

Memory corruption as GPU registers beyond the last protected range can be accessed through LPAC submissions.