qualcomm / qca6698aq CVEs

Memory Corruption when processing display command line information due to improper initialization of a variable.

Transient DOS when MAC configures config id greater than supported maximum value.

Memory corruption when accessing resources in kernel driver.

Memory corruption while accessing a synchronization object during concurrent operations.

Memory corruption while parsing clock configuration data for a specific hardware type.

Transient DOS while parsing video packets received from the video firmware.

Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication.

Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions.

Memory corruption while processing request sent from GVM.

Transient DOS while processing video packets received from video firmware.

Memory corruption while selecting the PLMN from SOR failed list.

information disclosure while invoking calibration data from user space to update firmware size.

Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously.

Information disclosure while opening a fastrpc session when domain is not sanitized.

Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE.

Memory corruption while decoding of OTA messages from T3448 IE.

Memory corruption while processing an IOCTL call to set mixer controls.

Memory corruption while sound model registration for voice activation with audio kernel driver.

Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation.

Memory corruption while processing IOCTL calls to add route entry in the HW.

Memory corruption can occur in the camera when an invalid CID is used.

Information disclosure while processing IO control commands.

Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem.

information disclosure while invoking the mailbox read API.

Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size.