qualcomm / qca6595 CVEs

Memory corruption while transmitting packet mapping information with invalid header payload size.

Memory corruption while processing memory map or unmap IOCTL operations simultaneously.

Transient DOS may occur while parsing extended IE in beacon.

Information disclosure may be there when a guest VM is connected.

Memory corruption may occur due top improper access control in HAB process.

Memory corruption while reading a value from a buffer controlled by the Guest Virtual Machine.

Memory corruption may occur while processing message from frontend during allocation.

Memory corruption may occur during communication between primary and guest VM.

Memory corruption may occur due to improper input validation in clock device.

Memory corruption while reading CPU state data during guest VM suspend.

Memory corruption can occur in the camera when an invalid CID is used.

Transient DOS can occur when GVM sends a specific message type to the Vdev-FastRPC backend.

Uncontrolled resource consumption when a driver, an application or a SMMU client tries to access the global registers through SMMU.

information disclosure while invoking the mailbox read API.

Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size.

Memory corruption while maintaining memory maps of HLOS memory.

Memory corruption in Hypervisor when platform information mentioned is not aligned.

Memory corruption when more scan frequency list or channels are sent from the user space.

Memory corruption when size of buffer from previous call is used without validation or re-initialization.

Memory corruption in Kernel while handling GPU operations.

Memory corruption in Automotive Multimedia due to improper access control in HAB.

Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation.

Memory corruption in Graphics Driver when destroying a context with KGSL_GPU_AUX_COMMAND_TIMELINE objects queued.

Information disclosure in Core services while processing a Diag command.

Memory corruption while parsing the ADSP response command.