Qualcomm ≫ 315 5g Iot Modem Firmware

Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.

Memory corruption while performing finish HMAC operation when context is freed by keymaster.

Transient DOS while loading the TA ELF file.

Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.

Memory corruption when the payload received from firmware is not as per the expected protocol size.

Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received.

Memory corruption when there is failed unmap operation in GPU.

Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR.

Transient DOS while processing DL NAS TRANSPORT message with payload length 0.

Transient DOS while processing PDU Release command with a parameter PDU ID out of range.