Qualcomm ≫ Snapdragon Xr2 5g Platform Firmware

Memory corruption while submitting blob data to kernel space though IOCTL.

Transient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE network.

Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.

Information disclosure may occur while processing goodbye RTCP packet from network.

Information disclosure may occur while decoding the RTP packet with invalid header extension from network.

Memory corruption while processing I2C settings in Camera driver.

Memory corruption may occur while processing voice call registration with user.

Memory corruption may occur while attaching VM when the HLOS retains access to VM.

Transient DOS may occur while parsing SSID in action frames.

Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.