Qualcomm ≫ Snapdragon Wear 1300 Firmware

While processing the authentication message in UE, improper authentication may lead to information disclosure.

Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.

Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked.

Memory corruption in SPS Application while requesting for public key in sorter TA.

Memory corruption in Audio while processing RT proxy port register driver.

Memory corruption in WLAN HAL while handling command streams through WMI interfaces.

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.

Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length.

Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/bootstrap request message.

Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received.