qca6391_firmware vulnerabilities

CVEs whose affected-version data names the qca6391_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

qca6391_firmware vulnerabilities

Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.

Memory corruption when processing draw objects of incorrect type during graphics command list execution.

Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.

Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.

Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.

Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.

Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.

Memory corruption when non-secure loader rewrites page tables before secure memory initialization.

Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.

Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.

Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.

Transient DOS when processing authentication frames with invalid FILS information element header lengths.

Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.

Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.

Transient DOS when processing target power rate tables during channel configuration.

Memory corruption when decoding corrupted satellite data files with invalid signature offsets.

Memory corruption while processing a frame request from user.

Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.

Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.

Memory corruption while processing identity credential operations in the trusted application.

Memory corruption while accessing a synchronization object during concurrent operations.

Memory corruption while processing shared command buffer packet between camera userspace and kernel.

Memory corruption while handling buffer mapping operations in the cryptographic driver.

Transient DOS while parsing video packets received from the video firmware.

Memory corruption while routing GPR packets between user and root when handling large data packet.

Memory corruption while processing a malformed license file during reboot.

Memory corruption during PlayReady APP usecase while processing TA commands.

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.