Qualcomm ≫ Qca6564au Firmware

Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.

Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.

Memory Corruption when copying data from a freed source while executing performance counter deselect operation.

Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.

Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.

Transient DOS when processing target power rate tables during channel configuration.

Memory corruption while using alignments for memory allocation.

Memory Corruption when adding user-supplied data without checking available buffer space.

Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs.

Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.