qualcomm / fastconnect_6800_firmware CVEs

Memory Corruption when allocating memory with sizes that exceed the maximum allowed value.

Memory corruption while using Strongbox due to buffer overflow.

Memory corruption while using Strongbox due to missing bounds check.

Memory corruption while processing fastboot commands with improperly formatted input.

Memory corruption in diagnostic services due to absence of input validation

Memory Corruption when processing device identifier strings that exceed the expected maximum length.

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.

Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs.

Transient DOS when MAC configures config id greater than supported maximum value.

Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.

Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls.

Transient DOS when an LTE RLC packet with invalid TB is received by UE.

Memory Corruption when processing IOCTLs for JPEG data without verification.

Memory corruption during video playback when video session open fails with time out error.

Memory corruption while encoding the image data.

Memory corruption due to double free when multiple threads race to set the timestamp store.

Memory corruption while processing config_dev IOCTL when camera kernel driver drops its reference to CPU buffers.

memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.

Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.

Memory corruption while processing simultaneous requests via escape path.

Memory corruption while processing IOCTL command with larger buffer in Bluetooth Host.

Memory corruption while processing specific files in Powerline Communication Firmware.

Transient DOS while processing a frame with malformed shared-key descriptor.

Transient DOS while processing CCCH data when NW sends data with invalid length.