Vulnerabilidades

Memory Corruption when handling power management requests with improperly sized input/output buffers.

Memory Corruption when using deprecated DMABUF IOCTL calls to manage video memory.

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.

Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation.

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.

Memory Corruption when retrieving output buffer with insufficient size validation.

Memory corruption while preprocessing IOCTL request in JPEG driver.

Memory Corruption when processing invalid user address with nonstandard buffer address.

Memory Corruption when accessing buffers with invalid length during TA invocation.

Memory Corruption when multiple threads concurrently access and modify shared resources.

Memory corruption while processing a video session to set video parameters.

Information disclosure while processing a firmware event.

Memory corruption while handling concurrent memory mapping and unmapping requests from a user-space application.

Information disclosure while registering commands from clients with diag through diagHal.

Transient DOS while processing power control requests with invalid antenna or stream values.

Transient DOS while handling command data during power control processing.

Transient DOS while processing an ANQP message.

Transient DOS while processing a frame with malformed shared-key descriptor.

Information disclosure while processing the hash segment in an MBN file.

Information disclosure while reading data from an image using specified offset and size parameters.

Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.

Memory corruption while processing video packets received from video firmware.

Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.