Qualcomm ≫ Snapdragon X55 5g Modem-rf System Firmware

Transient DOS while parsing the EPTM test control message to get the test pattern.

Memory corruption while processing config_dev IOCTL when camera kernel driver drops its reference to CPU buffers.

memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.

Memory corruption while selecting the PLMN from SOR failed list.

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.

Memory corruption while performing private key encryption in trusted application.

Cryptographic issue while performing RSA PKCS padding decoding.

Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.

Memory corruption while processing specific files in Powerline Communication Firmware.