Qualcomm ≫ Qca6698aq Firmware

Information disclosure while running video usecase having rogue firmware.

Memory corruption while selecting the PLMN from SOR failed list.

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.

information disclosure while invoking calibration data from user space to update firmware size.

Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake.

Memory corruption while performing private key encryption in trusted application.

Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.

Transient DOS while creating NDP instance.

Information disclosure while processing a packet at EAVB BE side with invalid header length.