Vulnerabilidades

Memory corruption while routing GPR packets between user and root when handling large data packet.

Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.

Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing.

Memory corruption while accessing a buffer during IOCTL processing.

Memory corruption while processing audio streaming operations.

Memory corruption while performing encryption and decryption commands.

Memory corruption while invoking remote procedure IOCTL calls.

Memory corruption while allocating buffers in DSP service.

Memory corruption while processing user buffers.

Memory corruption while processing an escape call.

memory corruption while processing an image encoding completion event.

Memory corruption while processing IOCTL call to get the mapping.

Memory corruption while processing escape commands from userspace.

Memory corruption while processing a malformed license file during reboot.

Transient DOS while processing IOCTL call for image encoding.

Memory corruption while processing camera platform driver IOCTL calls.

Information disclosure while processing batch command execution in Video driver.

Memory corruption while handling invalid inputs in application info setup.

Transient DOS while processing power control requests with invalid antenna or stream values.

Memory corruption while encoding the image data.

Transient DOS while handling command data during power control processing.

Transient DOS while parsing the EPTM test control message to get the test pattern.

Memory corruption due to global buffer overflow when a test command uses an invalid payload type.

Memory corruption due to double free when multiple threads race to set the timestamp store.

Memory corruption while selecting the PLMN from SOR failed list.