Jun Yao

The issue is related to a use after free in the synx driver, which occurs during multiple invocations of synx release calls while performing other functions.

The issue is related to an out of bound write while parsing RTT/TTY packet due to a lack of check of buffer size before copying into the buffer. This affects various Qualcomm Snapdragon products, including Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, and Snapdragon Wearables.

A race condition can occur when using the fastrpc memory mapping API. This issue affects various Qualcomm Snapdragon products, including Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, and Snapdragon Wearables, in multiple chipsets such as APQ8009, APQ8053, MSM8909W, MSM8917, MSM8953, QCS605, QM215, SA415M, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SDX24, and SXR1130.