Qualcomm ≫ Qca8386 Firmware

Information disclosure due to buffer over-read in WLAN while parsing NMF frame.

Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.

Transient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs.

Memory corruption in core due to stack-based buffer overflow

Information disclosure due to buffer overread in Core

Transient DOS due to buffer over-read in WLAN while parsing corrupted NAN frames.

Memory corruption due to buffer copy without checking size of input in modem while receiving WMI_REQUEST_STATS_CMDID command.

Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check.

Information disclosure due to buffer over-read in WLAN while parsing BTM action frame.

Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.