Memory corruption when malformed message payload is received from firmware.
The product performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer.
The product writes data past the end, or before the beginning, of the intended buffer.
Link | Tags |
---|---|
https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin | vendor advisory |