Qualcomm ≫ Wsa8835 Firmware

Transient DOS while handling command data during power control processing.

Memory corruption while encoding the image data.

Transient DOS while processing power control requests with invalid antenna or stream values.

Memory corruption while handling invalid inputs in application info setup.

Memory corruption while processing config_dev IOCTL when camera kernel driver drops its reference to CPU buffers.

Memory corruption due to double free when multiple threads race to set the timestamp store.

Memory corruption due to global buffer overflow when a test command uses an invalid payload type.

Information disclosure when Video engine escape input data is less than expected minimum size.

information disclosure while invoking calibration data from user space to update firmware size.

Memory corruption while performing private key encryption in trusted application.