Qualcomm ≫ Wcd9378c Firmware

Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations.

Memory corruption when processing decode statistics due to insufficient validation of offset against structure size.

Memory Corruption when copying large input data exceeds normal allocation limits.

Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.

Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size.

Memory Corruption when handling malformed request parameters in the fingerprint TA.

Memory Corruption when processing registry values with incorrect types using a direct query method.

Memory Corruption when processing asynchronous input parameters due to improper handling of modified values between check and use.

Memory Corruption when allocating memory with sizes that exceed the maximum allowed value.

Memory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications.