Qualcomm ≫ Qca0000 Firmware

Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation.

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.

Memory Corruption when retrieving output buffer with insufficient size validation.

Memory corruption while preprocessing IOCTL request in JPEG driver.

Memory Corruption when processing invalid user address with nonstandard buffer address.

Memory Corruption when accessing buffers with invalid length during TA invocation.

Memory Corruption when multiple threads concurrently access and modify shared resources.

Memory corruption while processing a video session to set video parameters.

Information disclosure while processing a firmware event.

Memory corruption while handling concurrent memory mapping and unmapping requests from a user-space application.