Qca6595 Firmware Security Vulnerabilities

CVE-2023-43536

Transient DOS while parse fils IE with length equal to 1.

CVE-2024-21457

INformation disclosure while handling Multi-link IE in beacon frame.

CVE-2024-21458

Information disclosure while handling SA query action frame.

CVE-2024-21461

Memory corruption while performing finish HMAC operation when context is freed by keymaster.

CVE-2024-21462

Transient DOS while loading the TA ELF file.

CVE-2024-21465

Memory corruption while processing key blob passed by the user.

CVE-2024-21466

Information disclosure while parsing sub-IE length during new IE generation.

CVE-2024-21469

Memory corruption when an invoke call and a TEE call are bound for the same trusted application.

CVE-2024-23368

Memory corruption when allocating and accessing an entry in an SMEM partition.

CVE-2024-23372

Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than expected size.

CVE-2024-23373

Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.

CVE-2024-23380

Memory corruption while handling user packets during VBO bind operation.