snapdragon_wear_1300_platform_firmware

Memory corruption in Core while processing control functions.

Memory corruption in TZ Secure OS while requesting a memory allocation from TA region.

Memory corruption in HLOS while running playready use-case.

Memory corruption in Audio during playback with speaker protection.

Memory corruption while performing finish HMAC operation when context is freed by keymaster.

Memory corruption when allocating and accessing an entry in an SMEM partition continuously.

Memory corruption due to double free in Core while mapping HLOS address to the list.

Memory Corruption in Core due to secure memory access by user while loading modem image.

Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.

Information disclosure due to buffer over-read in Modem while parsing DNS hostname.

Memory corruption in TZ Secure OS while loading an app ELF.

Memory Corruption in Data Modem while making a MO call or MT VOLTE call.

Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet.

Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network.

Memory corruption while loading an ELF segment in TEE Kernel.

Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.

The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.

Memory corruption while using the UIM diag command to get the operators name.

Memory corruption while processing a malformed license file during reboot.