qualcomm / wcd9340 CVEs

Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.

Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.

Memory Corruption when retrieving output buffer with insufficient size validation.

Memory corruption while processing the update SIM PB records request.

Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size.

Memory corruption while unmapping the fastrpc map when two threads can free the same map in concurrent scenario.

Permanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR container whose integrity check has failed, and the other is LPP where UE needs t…

Information disclosure due to buffer overread in Linux sensors

Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connecti…