Qualcomm ≫ Wcn6855 Firmware

Information disclosure due to buffer overread in Core

Information disclosure due to buffer overread in Core

Memory corruption due to stack-based buffer overflow in Core

Transient DOS due to buffer over-read in WLAN while parsing corrupted NAN frames.

Information disclosure due to buffer over-read in Bluetooth HOST while processing GetFolderItems and GetItemAttribute Cmds from peer device.

Memory corruption in Audio due to integer overflow to buffer overflow while music playback of clips like amr,evrc,qcelp with modified content.

Memory corruption due to buffer copy without checking size of input in modem while receiving WMI_REQUEST_STATS_CMDID command.

Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check.

Information disclosure due to buffer over-read in WLAN while parsing BTM action frame.

Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.