Qualcomm ≫ Snapdragon Auto 5g Modem-rf Firmware

Memory corruption during session sign renewal request calls in HLOS.

Information disclosure while handling beacon or probe response frame in STA.

Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.

Memory corruption when allocating and accessing an entry in an SMEM partition.

Memory corruption while performing finish HMAC operation when context is freed by keymaster.

Transient DOS while loading the TA ELF file.

Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.

Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.

Memory corruption when the payload received from firmware is not as per the expected protocol size.

Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size.