qualcomm / wcd9380_firmware CVEs

Memory corruption in Linux when the file upload API is called with parameters having large buffer.

Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network.

Memory corruption due to improper validation of array index in computer vision while testing EVA kernel without sending any frames.

Memory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel.

Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification requests.

Memory corruption in Multimedia Framework due to unsafe access to the data members

Memory corruption in SPI buses due to improper input validation while reading address configuration from spi buses in Snapdragon Mobile, Snapdragon Wearables

Memory corruption in i2c buses due to improper input validation while reading address configuration from i2c driver in Snapdragon Mobile, Snapdragon Wearables

Denial of service in Modem due to reachable assertion while processing SIB1 with invalid SCS and bandwidth settings in Snapdragon Mobile

Denial of service in Modem due to reachable assertion in Snapdragon Mobile

Denial of service in MODEM due to reachable assertion while processing configuration from network in Snapdragon Mobile

Denial of service in MODEM due to reachable assertion while processing SIB1 with invalid Bandwidth in Snapdragon Mobile

Denial of service in MODEM due to reachable assertion in Snapdragon Mobile

Memory corruption in Qualcomm IPC due to buffer copy without checking the size of input while starting communication with a compromised kernel. in Snapdragon Mobile

Memory corruption in BTHOST due to double free while music playback and calls over bluetooth headset in Snapdragon Mobile

Memory corruption in multimedia due to use after free during callback registration failure in Snapdragon Mobile

Memory corruption in graphics due to use-after-free in graphics dispatcher logic in Snapdragon Mobile

Memory corruption in WLAN due to buffer copy without checking size of input while parsing keys in Snapdragon Connectivity, Snapdragon Mobile

Memory corruption in graphics due to use-after-free while graphics profiling in Snapdragon Connectivity, Snapdragon Mobile

Memory corruption in audio while playing record due to improper list handling in two threads in Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables

Possible address manipulation from APP-NS while APP-S is configuring an RG where it tries to merge the address ranges in Snapdragon Connectivity, Snapdragon Mobile

Improper checking of AP-S lock bit while verifying the secure resource group permissions can lead to non secure read and write access in Snapdragon Connectivity, Snapdragon Mobile

Memory corruption in audio due to use after free while managing buffers from internal cache in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile

Improper serialization of message queue client registration can lead to race condition allowing multiple gunyah message clients to register with same label in Snapdragon Connectiv…

Possible out of bounds read due to improper typecasting while handling page fault for global memory in Snapdragon Connectivity, Snapdragon Mobile