Qualcomm ≫ 315 5g Iot Modem Firmware

Memory corruption while performing private key encryption in trusted application.

Transient DOS while processing CCCH data when NW sends data with invalid length.

Transient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE network.

Memory corruption while processing video packets received from video firmware.

Transient DOS while processing received beacon frame.

Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.

Transient DOS may occur while parsing SSID in action frames.

Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.

There may be information disclosure during memory re-allocation in TZ Secure OS.

Memory corruption while calling the NPU driver APIs concurrently.