Qualcomm ≫ Mdm9650 Firmware

Memory corruption while processing voice packet with arbitrary data received from ADSP.

Memory corruption when two threads try to map and unmap a single node simultaneously.

Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.

Transient DOS while parsing ESP IE from beacon/probe response frame.

Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.

Memory corruption when allocating and accessing an entry in an SMEM partition.

Memory corruption while performing finish HMAC operation when context is freed by keymaster.

Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.

Memory corruption when there is failed unmap operation in GPU.

Memory corruption in SPS Application while requesting for public key in sorter TA.