qualcomm / qca6421 CVEs

Transient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE network.

Cryptographic issues while generating an asymmetric key pair for RKP use cases.

Memory corruption when the channel ID passed by user is not validated and further used.

Transient DOS while processing DL NAS TRANSPORT message with payload length 0.

Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR.

Transient DOS while processing PDU Release command with a parameter PDU ID out of range.

Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16.

Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR.

Transient DOS in Multi-Mode Call Processor while processing UE policy container.

Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage.

Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data.

Transient DOS in Data modem while handling TLB control messages from the Network.

Transient DOS in Modem after RRC Setup message is received.

Memory corruption in WLAN HOST while processing the WLAN scan descriptor list.

Transient DOS in Modem while triggering a camping on an 5G cell.

Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use.

Memory corruption in WLAN while running doDriverCmd for an unspecific command.

Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.

Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.

Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network.

Transient DOS due to reachable assertion in Modem because of invalid network configuration.

Assertion occurs while processing Reconfiguration message due to improper validation

Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported.

Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key.

Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity.