Qualcomm ≫ Qca6696 Firmware

Memory corruption while sound model registration for voice activation with audio kernel driver.

Memory corruption may occur during IO configuration processing when the IO port count is invalid.

Memory corruption during concurrent access to server info object due to incorrect reference count update.

Memory corruption during concurrent access to server info object due to unprotected critical field.

Transient DOS may occur while parsing SSID in action frames.

Memory corruption while processing message content in eAVB.

Memory corruption while transmitting packet mapping information with invalid header payload size.

Memory corruption while processing memory map or unmap IOCTL operations simultaneously.

Transient DOS may occur while parsing extended IE in beacon.

Transient DOS may occur while parsing EHT operation IE or EHT capability IE.