Qualcomm ≫ Qca9984 Firmware

Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.

Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.

Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.

Memory Corruption in Data Modem while processing DMA buffer release event about CFR data.

Transient DOS in WLAN Firmware while processing the received beacon or probe response frame.

Transient DOS in WLAN Firmware while processing frames with missing header fields.

Transient DOS while parsing WLAN beacon or probe-response frame.

Memory corruption due to double free in Core while mapping HLOS address to the list.

Information disclosure in Kernel due to indirect branch misprediction.

Memory corruption due to improper access control in kernel while processing a mapping request from root process.