qualcomm / qca6310_firmware CVEs

Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources.

Memory corruption while processing IOCTL command to handle buffers associated with a session.

Memory corruption during concurrent access to server info object due to unprotected critical field.

Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver.

Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table.

Memory corruption while handling user packets during VBO bind operation.

Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization.

Memory corruption while parsing qcp clip with invalid chunk data size.

Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size.

Memory corruption in video while parsing invalid mp2 clip.

Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call.

Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size.

Memory corruption while sending SMS from AP firmware.

Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM.

Memory corruption in core services when Diag handler receives a command to configure event listeners.

Memory corruption while processing audio effects.

Information disclosure in WLAN HAL when reception status handler is called.

Information disclosure in WLAN HAL while handling the WMI state info command.

Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan.

Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement (CSA).

Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region.

Memory Corruption in Core Platform while printing the response buffer in log.

Memory corruption in Core Platform while printing the response buffer in log.

Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.

Memory corruption in Linux while calling system configuration APIs.