Qualcomm ≫ Snapdragon X65 5g Modem-rf System Firmware

Memory corruption in Audio during playback with speaker protection.

Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call.

Information disclosure in Core services while processing a Diag command.

Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call.

Transient DOS in WLAN Firmware while processing a FTMR frame.

Transient DOS while parsing WPA IES, when it is passed with length more than expected size.

Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE.

Memory corruption in WLAN Host while processing RRM beacon on the AP.