qualcomm / qca6574_firmware CVEs

Memory Corruption when processing display command line information due to improper initialization of a variable.

Memory Corruption while processing IOCTL calls when concurrent access to shared buffer occurs.

Memory corruption while handling invalid inputs in application info setup.

Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.

Transient DOS while processing the EHT operation IE in the received beacon frame.

Memory corruption while processing memory map or unmap IOCTL operations simultaneously.

Transient DOS may occur while parsing extended IE in beacon.

Memory corruption while processing multiple IOCTL calls from HLOS to DSP.

Memory corruption may occur while accessing a variable during extended back to back tests.

Information disclosure may occur due to improper permission and access controls to Video Analytics engine.

Memory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients.

Memory corruption while releasing shared resources in MinkSocket listener thread.

Information Disclosure while parsing beacon frame in STA.

Memory corruption when more scan frequency list or channels are sent from the user space.

Memory corruption when the IOCTL call is interrupted by a signal.

Memory corruption as GPU registers beyond the last protected range can be accessed through LPAC submissions.

Memory corruption while playing audio file having large-sized input buffer.

Memory corruption in Kernel while handling GPU operations.

Memory corruption while processing Codec2 during v13k decoder pitch synthesis.

Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point.

Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE.

Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP.

Memory corruption in Graphics Driver when destroying a context with KGSL_GPU_AUX_COMMAND_TIMELINE objects queued.

Memory corruption in wearables while processing data from AON.

Memory corruption in Automotive OS whenever untrusted apps try to access HAb for graphics functionalities.