Qualcomm ≫ Qcn7606 Firmware

Memory Corruption in Data Modem while processing DMA buffer release event about CFR data.

Memory corruption due to double free in Core while mapping HLOS address to the list.

Information disclosure in Kernel due to indirect branch misprediction.

Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.

information disclosure due to cryptographic issue in Core during RPMB read request.

Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.

Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.

Memory corruption due to double free in core while initializing the encryption key.

Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity.

Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.