Qualcomm ≫ Sm7250p Firmware

Memory corruption when multiple threads try to unregister the CVP buffer at the same time.

Memory corruption when allocating and accessing an entry in an SMEM partition continuously.

Possible out of bound access in audio module due to lack of validation of user provided input.

Memory corruption while processing GPU page table switch.

Memory corruption while handling session errors from firmware.

Memory corruption while processing voice packet with arbitrary data received from ADSP.

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.

Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it.

Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers.

Memory corruption when user provides data for FM HCI command control operations.