Qualcomm ≫ Sa8295p Firmware

Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.

Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use.

Memory Corruption in Audio while playing amrwbplus clips with modified content.

Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.

Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.

Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions.

Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.

Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.

Memory Corruption in Audio while allocating the ion buffer during the music playback.

Memory Corruption in WLAN HOST while parsing QMI response message from firmware.