Qualcomm ≫ Qsm8250 Firmware

Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.

Memory Corruption in Audio while playing amrwbplus clips with modified content.

Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.

Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.

Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.

Memory Corruption in Audio while allocating the ion buffer during the music playback.

Transient DOS in WLAN Firmware while processing frames with missing header fields.

Memory corruption due to double free in Core while mapping HLOS address to the list.

Information disclosure in Kernel due to indirect branch misprediction.

Memory corruption due to improper access control in kernel while processing a mapping request from root process.