qualcomm / fwa_gen_3_ultra CVEs

Transient DOS when processing target power rate tables during channel configuration.

Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection.

Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans.

Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs.

Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls.

Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls.

Memory Corruption when accessing buffers with invalid length during TA invocation.

Transient DOS when an LTE RLC packet with invalid TB is received by UE.