Qca6797aq Firmware vulnerabilities
9 known vulnerabilities in Qca6797aq Firmware from Qualcomm. 9 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.1 High severity
Snapdragon: Reusing a Nonce, Key Pair in Encryption
Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security.
- 7.5 High severity
Snapdragon: Buffer Over-read
Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection.
- 7.8 High severity
Snapdragon: Use After Free
Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it for a process-specific task, issues may arise.
- 7.5 High severity
Snapdragon: Buffer Over-read
Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element (IE) of a beacon frame that is received from over-the-air (OTA).
- 7.8 High severity
Snapdragon: Use After Free
Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and reclaiming of memory buffers are performed at the same time.
- 7.8 High severity
Snapdragon: Out-of-bounds Write
Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.
- 7.8 High severity
Snapdragon: Use After Free
Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL.
- 7.8 High severity
Qualcomm Multiple Chipsets Integer Overflow Exploited
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
- 7.8 High severity
Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Exploited
Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.