qualcomm / fastconnect_6200_firmware CVEs

Memory Corruption when allocating memory with sizes that exceed the maximum allowed value.

Memory Corruption when handling flash commands due to outdated LED count values being used after userspace modification.

Memory Corruption when processing fastboot commands to set display mode.

Memory corruption while processing fastboot commands with improperly formatted input.

Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.

Memory corruption in diagnostic services due to absence of input validation

Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization.

Memory Corruption when processing device identifier strings that exceed the expected maximum length.

Memory corruption when another driver calls an IOCTL with invalid input/output buffer.

Transient DOS when processing target power rate tables during channel configuration.

Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection.

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.

Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans.

Memory corruption when decoding corrupted satellite data files with invalid signature offsets.

Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.

Memory Corruption when adding user-supplied data without checking available buffer space.

Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs.

Transient DOS when MAC configures config id greater than supported maximum value.

Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls.

Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls.

Transient DOS when an LTE RLC packet with invalid TB is received by UE.

Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.

Memory corruption occurs when a secure application is launched on a device with insufficient memory.

Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations.