Описание
Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer.
Затрагиваемое ПО
Qualcomm Ar8035 firmwareQualcomm Ar8035Qualcomm Csra6620 firmwareQualcomm Csra6620Qualcomm Csra6640 firmwareQualcomm Csra6640Qualcomm Fastconnect 6200 firmwareQualcomm Fastconnect 6200Qualcomm Fastconnect 6700 firmwareQualcomm Fastconnect 6700Qualcomm Wcd9380 firmwareQualcomm Wcd9380Qualcomm Wcd9385 firmwareQualcomm Wcd9385Qualcomm Wcd9390 firmwareQualcomm Wcd9390Qualcomm Wcd9395 firmwareQualcomm Wcd9395Qualcomm Wcn3910 firmwareQualcomm Wcn3910Qualcomm Wcn3950 firmwareQualcomm Wcn3950Qualcomm Wcn3980 firmwareQualcomm Wcn3980Qualcomm Wcn3988 firmware
CVSS
| Балл | 7.8 — высокая |
| Вектор | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Источники
https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html