Qualcomm ≫ Sa8295p Firmware

Memory corruption while processing config_dev IOCTL when camera kernel driver drops its reference to CPU buffers.

Memory corruption while processing message in guest VM.

Memory corruption while processing data sent by FE driver.

Memory corruption while handling repeated memory unmap requests from guest VM.

information disclosure while invoking calibration data from user space to update firmware size.

Memory corruption while performing private key encryption in trusted application.

Information disclosure while processing a packet at EAVB BE side with invalid header length.

Memory corruption while processing commands from A2dp sink command queue.

Memory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently.

Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.