Qualcomm ≫ Qca6698aq Firmware

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.

Transient DOS while parsing fragments of MBSSID IE from beacon frame.

Transient DOS while parsing BTM ML IE when per STA profile is not included.

Transient DOS while processing the CU information from RNR IE.

Memory corruption while handling the PDR in driver for getting the remote heap maps.

Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size.

Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.

Memory corruption while maintaining memory maps of HLOS memory.

Transient DOS while parsing probe response and assoc response frame.

Memory corruption while processing user packets to generate page faults.