Qualcomm ≫ Qcn7606 Firmware

Memory corruption while reading secure file.

Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer.

Memory corruption while IOCTL call is invoked from user-space to read board data.

Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass.

There may be information disclosure during memory re-allocation in TZ Secure OS.

Information disclosure while deriving keys for a session for any Widevine use case.

Memory corruption when IOCTL call is invoked from user-space to read board data.

Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.

Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver.

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.