Qualcomm ≫ Cologne Firmware

Memory Corruption when processing invalid user address with nonstandard buffer address.

Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.

Memory Corruption when accessing buffers with invalid length during TA invocation.

Transient DOS when processing a received frame with an excessively large authentication information element.

Memory Corruption while processing IOCTL call to update sensor property settings with invalid input parameters.

Memory Corruption when multiple threads concurrently access and modify shared resources.

Memory corruption while processing a video session to set video parameters.