Qualcomm ≫ Sm4125 Firmware

Information disclosure while deriving keys for a session for any Widevine use case.

Memory corruption when allocating and accessing an entry in an SMEM partition continuously.

Memory corruption while processing GPU page table switch.

Memory corruption while handling session errors from firmware.

Memory corruption while processing voice packet with arbitrary data received from ADSP.

Memory corruption when two threads try to map and unmap a single node simultaneously.

Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.

Memory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients.

Cryptographic issue while parsing RSA keys in COBR format.

memory corruption when an invalid firehose patch command is invoked.