Qualcomm ≫ Qca6335 Firmware

Memory corruption in WLAN handler while processing PhyID in Tx status handler.

Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload.

Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.

Memory corruption in WLAN HAL while passing command parameters through WMI interfaces.

Memory corruption in Core Platform while printing the response buffer in log.

Memory Corruption in Core Platform while printing the response buffer in log.

Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.

Memory corruption while allocating memory in COmxApeDec module in Audio.

Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.

Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.