Qualcomm ≫ Qcs7230 Firmware

Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.

Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus.

Memory corruption when memory mapped in a VBO is not unmapped by the GPU SMMU.

Memory corruption while processing graphics kernel driver request to create DMA fence.

Memory corruption when kernel driver attempts to trigger hardware fences.

Memory corruption when keymaster operation imports a shared key.

Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than expected size.

Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.

Memory corruption while handling user packets during VBO bind operation.

Memory corruption when an invoke call and a TEE call are bound for the same trusted application.