Qualcomm ≫ Snapdragon X70 Modem-rf System Firmware

Memory corruption while selecting the PLMN from SOR failed list.

Cryptographic issue while performing RSA PKCS padding decoding.

Transient DOS while processing CCCH data when NW sends data with invalid length.

Information disclosure while processing the hash segment in an MBN file.

Information disclosure while reading data from an image using specified offset and size parameters.

Information disclosure while creating MQ channels.

There may be information disclosure during memory re-allocation in TZ Secure OS.

Memory corruption when allocating and accessing an entry in an SMEM partition continuously.

Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.

memory corruption when an invalid firehose patch command is invoked.