Qualcomm ≫ 315 5g Iot Modem Firmware

Transient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE network.

Memory corruption while processing video packets received from video firmware.

Transient DOS while processing received beacon frame.

Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.

Transient DOS may occur while parsing SSID in action frames.

Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.

There may be information disclosure during memory re-allocation in TZ Secure OS.

Memory corruption while calling the NPU driver APIs concurrently.

Memory corruption may occur while validating ports and channels in Audio driver.

Memory corruption while Configuring the SMR/S2CR register in Bypass mode.