qualcomm / qca6564au_firmware CVEs

Memory Corruption when processing display command line information due to improper initialization of a variable.

Memory corruption while routing GPR packets between user and root when handling large data packet.

Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.

Transient DOS while processing the EHT operation IE in the received beacon frame.

Memory corruption while sound model registration for voice activation with audio kernel driver.

Transient DOS may occur while parsing extended IE in beacon.

Memory corruption while accessing MSM channel map and mixer functions.

Memory corruption while processing input message passed from FE driver.

Information disclosure may occur due to improper permission and access controls to Video Analytics engine.

Memory corruption while parsing the memory map info in IOCTL calls.

Information disclosure during audio playback.

Memory corruption can occur if an already verified IFS2 image is overwritten, bypassing boot verification. This allows unauthorized programs to be injected into security-sensitive…

Transient DOS while parsing the MBSSID IE from the beacons when IE length is 0.

Transient DOS while parsing ESP IE from beacon/probe response frame.

Information disclosure while parsing the multiple MBSSID IEs from the beacon.

Information Disclosure while parsing beacon frame in STA.

Memory corruption when more scan frequency list or channels are sent from the user space.

Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point.

Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE.

Weak configuration in Automotive while VM is processing a listener request from TEE.

Transient DOS in Audio while remapping channel buffer in media codec decoding.

Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length.

Memory corruption due to untrusted pointer dereference in automotive during system call.

Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony.

Memory corruption in Automotive GPU while querying a gsl memory node.