qualcomm / wcn7860_firmware CVEs

Information Disclosure when processing wireless network channel switch information with improperly formatted length fields.

Cryptographic issue while copying data to a destination buffer without validating its size.

Memory corruption while processing a frame request from user.

Cryptographic issue may occur while encrypting license data.

Memory corruption while performing sensor register read operations.

Memory corruption during the FRS UDS generation process.

Transient DOS can occur while processing UCI command.

Memory corruption while processing GPU commands.

Memory corruption while handling session errors from firmware.

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.

Transient DOS while processing the CU information from RNR IE.

Transient DOS while parsing BTM ML IE when per STA profile is not included.

Transient DOS while parsing fragments of MBSSID IE from beacon frame.