qualcomm / qca6574au_firmware CVEs

An app with non-privileged access can change global system brightness and cause undesired system behavior.

Memory corruption in Video while calling APIs with different instance ID than the one received in initialization.

Memory corruption in Linux while calling system configuration APIs.

Information disclosure in DSP Services while loading dynamic module.

Memory corruption in Automotive GPU while querying a gsl memory node.

Memory corruption in Linux Networking due to double free while handling a hyp-assign.

Transient DOS due to uncontrolled resource consumption in Linux kernel when malformed messages are sent from the Gunyah Resource Manager message queue.

Memory corruption due to use after free in Core when multiple DCI clients register and deregister.

Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host

Memory corruption due to buffer copy without checking the size of input in Core while processing ioctl commands from diag client applications.

Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries.

Memory corruption in HAB Memory management due to broad system privileges via physical address.

Transient DOS due to reachable assertion in Modem during OSI decode scheduling.

Memory Corruption in Multimedia Framework due to integer overflow when synx bind is called along with synx signal.

Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback.

Memory corruption in Automotive Android OS due to improper validation of array index.

Memory corruption due to stack based buffer overflow in core while sending command from USB of large size.

Memory corruption due to improper validation of array index in Multi-mode call processor.

Transient DOS due to reachable assertion in Modem while processing SIB1 Message.

Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE handover.

Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call session from user space with invalid session id.

Memory corruption due to use after free in trusted application environment.

Transient Denial-of-service in Automotive due to improper input validation while parsing ELF file.

Memory corruption in Automotive Android OS due to improper input validation.

Memory corruption in android core due to improper validation of array index while returning feature ids after license authentication.