qualcomm / qca6678aq CVEs

Memory Corruption when handling malformed request parameters in the fingerprint TA.

Memory Corruption when processing display command line information due to improper initialization of a variable.

Transient DOS while parsing video packets received from the video firmware.

Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication.

Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions.

Transient DOS while processing video packets received from video firmware.

Transient DOS while parsing the EPTM test control message to get the test pattern.

Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE.

Memory corruption while processing an IOCTL call to set mixer controls.

Memory corruption while sound model registration for voice activation with audio kernel driver.

Memory corruption during concurrent access to server info object due to incorrect reference count update.

Memory corruption while processing IOCTL calls to add route entry in the HW.

Memory corruption can occur in the camera when an invalid CID is used.

Memory corruption while invoking redundant release command to release one buffer from user space as race condition can occur in kernel space between buffer release and buffer acce…