snapdragon_8cx_gen_2_5g_compute_platform_firmware

Memory corruption in HLOS while running playready use-case.

Memory corruption in Core while processing control functions.

Memory corruption in TZ Secure OS while requesting a memory allocation from TA region.

Memory corruption in Audio during playback with speaker protection.

Memory Corruption in Core due to secure memory access by user while loading modem image.

Memory corruption while Configuring the SMR/S2CR register in Bypass mode.

Memory corruption when allocating and accessing an entry in an SMEM partition continuously.

Memory corruption in TZ Secure OS while loading an app ELF.

Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver.

Memory corruption in WLAN handler while processing PhyID in Tx status handler.

Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers.

Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload.

Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART.

Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload.

Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload.

The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.

Transient DOS in WLAN Firmware while parsing a BTM request.

Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.

Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network.