qualcomm / qca6310 CVEs

Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources.

Memory corruption while processing IOCTL command to handle buffers associated with a session.

Memory corruption during concurrent access to server info object due to unprotected critical field.

Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver.

Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table.

Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization.

Memory corruption in video while parsing invalid mp2 clip.

Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call.

Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size.

Memory corruption while sending SMS from AP firmware.

Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM.

Memory corruption in core services when Diag handler receives a command to configure event listeners.

Memory corruption while processing audio effects.

Information disclosure in WLAN HAL when reception status handler is called.

Information disclosure in WLAN HAL while handling the WMI state info command.

Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement (CSA).

Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region.

Memory Corruption in Core Platform while printing the response buffer in log.

Memory corruption in Core Platform while printing the response buffer in log.

Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.

Memory corruption in Linux while calling system configuration APIs.

Information disclosure in DSP Services while loading dynamic module.

Memory corruption in Linux android due to double free while calling unregister provider after register call.

Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation.

Memory corruption due to use after free in Modem while modem initialization.