wcn6650_firmware vulnerabilities

CVEs whose affected-version data names the wcn6650_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

wcn6650_firmware vulnerabilities

Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.

Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.

Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.

Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.

Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.

Memory corruption while processing a frame request from user.

Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.

Memory corruption while deinitializing a HDCP session.

Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.

Memory corruption while processing identity credential operations in the trusted application.

Memory corruption while processing a secure logging command in the trusted application.

Cryptographic issue may occur while encrypting license data.

Memory corruption while handling sensor utility operations.

Memory corruption while accessing a synchronization object during concurrent operations.

Memory corruption while parsing clock configuration data for a specific hardware type.

Memory corruption while processing a config call from userspace.

Information disclosure while processing a firmware event.

Information disclosure while running video usecase having rogue firmware.

Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.