Qualcomm ≫ Sd855 Firmware

Information disclosure due to buffer overread in Core

Memory corruption due to stack-based buffer overflow in Core

Memory corruption in Audio due to integer overflow to buffer overflow while music playback of clips like amr,evrc,qcelp with modified content.

Information disclosure due to buffer over-read in WLAN while parsing BTM action frame.

Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.

Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.

Memory corruption in Core due to stack-based buffer overflow.

Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote

Memory corruption in display driver due to incorrect type casting while accessing the fence structure fields

Memory corruption in display due to double free while allocating frame buffer memory