Qualcomm ≫ Snapdragon X65 5g Modem-rf System Firmware

Information disclosure while reading data from an image using specified offset and size parameters.

Transient DOS while processing the EHT operation IE in the received beacon frame.

Memory corruption may occur while attaching VM when the HLOS retains access to VM.

Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling.

Transient DOS may occur while parsing SSID in action frames.

Transient DOS may occur while parsing extended IE in beacon.

Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.

Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.

Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass.