qualcomm sa8255p firmware vulnerabilities, newest first

Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.

Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying.

Memory Corruption when handling malformed request parameters in the fingerprint TA.

Memory corruption while processing a packet with a size close to the maximum allowed value.

Memory Corruption when updating prepared commands with invalid port indices based on user space input exceeds supported read client limits.

Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security.

Memory Corruption when validating input batch size and buffer plane count exceeds maximum allowed values.

Memory Corruption when handling flash commands due to outdated LED count values being used after userspace modification.

Memory Corruption when parsing jpeg commands due to unaccounted extra writes to the buffer during validation checks.

Memory corruption while processing a frame request from user.

Memory Corruption when accessing trusted execution environment without proper privilege check.

Memory Corruption while processing IOCTL calls when concurrent access to shared buffer occurs.

Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.

Transient DOS when processing a received frame with an excessively large authentication information element.

Memory corruption while calculating offset from partition start point.

Memory corruption when calculating oversized partition sizes without proper checks.

Memory corruption when accessing resources in kernel driver.

Memory corruption while processing a secure logging command in the trusted application.

Cryptographic issue may occur while encrypting license data.

Memory corruption while processing shared command buffer packet between camera userspace and kernel.

Memory corruption while loading an invalid firmware in boot loader.

Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication.

Memory corruption while copying packets received from unix clients.

Information disclosure while exposing internal TA-to-TA communication APIs to HLOS

Memory corruption while processing large input data from a remote source via a communication interface.

Information disclosure while processing message from client with invalid payload.

Memory corruption when triggering a subsystem crash with an out-of-range identifier.

Memory corruption while processing client message during device management.

Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions.

Memory corruption while processing request sent from GVM.

Memory corruption while processing control commands in the virtual memory management interface.

Memory corruption while handling invalid inputs in application info setup.

Memory corruption while handling repeated memory unmap requests from guest VM.

Memory corruption while processing data sent by FE driver.

Memory corruption while processing message in guest VM.

Information disclosure while processing a packet at EAVB BE side with invalid header length.

Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously.

Memory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently.

Transient DOS while processing received beacon frame.

Transient DOS may occur while processing malformed length field in SSID IEs.

Memory corruption while copying the result to the transmission queue which is shared between the virtual machine and the host.

Memory corruption while copying the result to the transmission queue in EMAC.

Memory corruption while processing a message, when the buffer is controlled by a Guest VM, the value can be changed continuously.

Memory corruption while processing message content in eAVB.

Memory corruption while transmitting packet mapping information with invalid header payload size.

Memory corruption while processing memory map or unmap IOCTL operations simultaneously.

Information disclosure may be there when a guest VM is connected.

Memory corruption may occur due top improper access control in HAB process.

Memory corruption may occur in keyboard virtual device due to guest VM interaction.

Memory corruption while reading a type value from a buffer controlled by the Guest Virtual Machine.