Qualcomm ≫ Snapdragon Auto 5g Modem-rf Firmware

Transient DOS when processing target power rate tables during channel configuration.

Memory corruption when decoding corrupted satellite data files with invalid signature offsets.

Memory corruption while using alignments for memory allocation.

Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs.

Transient DOS when MAC configures config id greater than supported maximum value.

Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.

Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources.

Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls.

Memory corruption while handling different IOCTL calls from the user-space simultaneously.

Transient DOS when an LTE RLC packet with invalid TB is received by UE.