qualcomm / wcn7850_firmware CVEs

Memory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel.

Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification requests.

Memory corruption in SPI buses due to improper input validation while reading address configuration from spi buses in Snapdragon Mobile, Snapdragon Wearables

Memory corruption in i2c buses due to improper input validation while reading address configuration from i2c driver in Snapdragon Mobile, Snapdragon Wearables

Denial of service in MODEM due to reachable assertion while processing configuration from network in Snapdragon Mobile

Denial of service in MODEM due to reachable assertion in Snapdragon Mobile

Memory corruption in Qualcomm IPC due to buffer copy without checking the size of input while starting communication with a compromised kernel. in Snapdragon Mobile

Memory corruption in BTHOST due to double free while music playback and calls over bluetooth headset in Snapdragon Mobile

Memory corruption in multimedia due to use after free during callback registration failure in Snapdragon Mobile

Memory corruption in graphics due to use-after-free in graphics dispatcher logic in Snapdragon Mobile

Memory corruption in WLAN due to buffer copy without checking size of input while parsing keys in Snapdragon Connectivity, Snapdragon Mobile