Qualcomm ≫ Sm6250 Firmware

Memory corruption when another driver calls an IOCTL with invalid input/output buffer.

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.

Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation.

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.

Memory Corruption when retrieving output buffer with insufficient size validation.

Memory corruption when decoding corrupted satellite data files with invalid signature offsets.

Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.

Transient DOS when an LTE RLC packet with invalid TB is received by UE.

Memory Corruption when processing IOCTLs for JPEG data without verification.