Qualcomm ≫ Cologne Firmware

Memory Corruption when processing display command line information due to improper initialization of a variable.

Memory Corruption when sending random number generator command with insufficient output buffer size.

Memory Corruption when output buffer size is smaller than input buffer size during data copying operation.

Memory corruption in windows drivers while sending incorrect trusted application request

Memory corruption in diagnostic services due to absence of input validation

Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization.

Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.

Memory corruption while processing IOCTL command when device is in power-save state.

Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.

Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.