Qualcomm ≫ Sa9000p Firmware

Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment.

Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback.

Memory corruption due to double free in core while initializing the encryption key.

Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity.

Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD.

Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone.

Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory.

Transient Denial-of-service in Automotive due to improper input validation while parsing ELF file.

Memory corruption in core due to stack-based buffer overflow

Information disclosure due to buffer overread in Core