Qualcomm ≫ Sm8150 Firmware

Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.

Transient DOS in WLAN Firmware while parsing rsn ies.

Cryptographic issue in Data Modem due to improper authentication during TLS handshake.

Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.

Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.

Transient DOS in WLAN Firmware while processing frames with missing header fields.

Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.

Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode.

Memory corruption due to double free in Core while mapping HLOS address to the list.

Transient DOS due to improper authorization in Modem