Qualcomm ≫ Sm7325p Firmware

Memory corruption in Hypervisor when platform information mentioned is not aligned.

Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked.

Memory corruption in HLOS while checking for the storage type.

Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.

Memory corruption when the payload received from firmware is not as per the expected protocol size.

Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received.

Memory corruption when there is failed unmap operation in GPU.

Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR.

Transient DOS while processing DL NAS TRANSPORT message with payload length 0.

Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command.