qualcomm / qca6320_firmware CVEs

Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources.

Memory corruption while processing IOCTL command to handle buffers associated with a session.

Memory corruption during concurrent access to server info object due to unprotected critical field.

Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver.

Memory corruption in video while parsing invalid mp2 clip.

Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size.

Memory corruption while sending SMS from AP firmware.

Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM.

Memory corruption in core services when Diag handler receives a command to configure event listeners.

Memory corruption while processing audio effects.

Information disclosure in WLAN HAL when reception status handler is called.

Information disclosure in WLAN HAL while handling the WMI state info command.

Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement (CSA).

Memory corruption in Linux while calling system configuration APIs.

Information disclosure in DSP Services while loading dynamic module.

Memory corruption in Linux android due to double free while calling unregister provider after register call.

Memory corruption due to use after free in Modem while modem initialization.

Information disclosure due to buffer overread in Linux sensors

Memory corruption in WLAN due to use after free

Memory corruption in modem due to use of out of range pointer offset while processing qmi msg

Information disclosure due to buffer over-read in Bluetooth HOST while processing GetFolderItems and GetItemAttribute Cmds from peer device.

Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Ind…

Denial of service due to reachable assertion in modem while processing filter rule from application client in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile

Information disclosure due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industri…

Denial of service in BOOT when partition size for a particular partition is requested due to integer overflow when blocks are calculated in Snapdragon Auto, Snapdragon Compute, Sn…