Qualcomm ≫ Flight Rb5 5g Platform Firmware

Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.

Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode.

Information disclosure in Kernel due to indirect branch misprediction.

Memory corruption due to improper access control in kernel while processing a mapping request from root process.

Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request.

Memory corruption in Graphics while importing a file.

Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool.

Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.

Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.

Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information.