Qualcomm ≫ Sa4155p Firmware

Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity.

Information Disclosure in Graphics during GPU context switch.

Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD.

Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.

Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.

Memory corruption in core due to stack-based buffer overflow

Information disclosure due to buffer overread in Core

Information disclosure due to buffer overread in Core

Memory corruption due to stack-based buffer overflow in Core

Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.