qualcomm / qcs6490_firmware CVEs

Memory corruption while processing identity credential operations in the trusted application.

Memory corruption while parsing clock configuration data for a specific hardware type.

Memory Corruption when processing IOCTLs for JPEG data without verification.

Memory corruption while accessing a buffer during IOCTL processing.

Memory corruption while performing encryption and decryption commands.

memory corruption while processing an image encoding completion event.

Transient DOS while processing IOCTL call for image encoding.

Memory corruption while encoding the image data.

Information disclosure when Video engine escape input data is less than expected minimum size.

Information disclosure while running video usecase having rogue firmware.

memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.

Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake.

Memory corruption while processing simultaneous requests via escape path.

Memory corruption while processing IOCTL command with larger buffer in Bluetooth Host.

Memory corruption during the image encoding process.

Memory corruption while processing event close when client process terminates abruptly.

Memory corruption while processing the TESTPATTERNCONFIG escape path.

Memory corruption while processing multiple simultaneous escape calls.

Memory corruption while processing a private escape command in an event trigger.

memory corruption while processing IOCTL commands, when the buffer in write loopback mode is accessed after being freed.

Memory corruption while processing escape code, when DisplayId is passed with large unsigned value.

Memory corruption while processing image encoding, when configuration is NULL in IOCTL parameter.

Memory corruption while processing image encoding, when input buffer length is 0 in IOCTL call.

Transient DOS may occur while parsing SSID in action frames.

Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer.