Qualcomm ≫ Snapdragon Auto 4g Modem Firmware

Information disclosure while handling beacon or probe response frame in STA.

Memory corruption when allocating and accessing an entry in an SMEM partition.

Memory corruption while performing finish HMAC operation when context is freed by keymaster.

Transient DOS while loading the TA ELF file.

Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.

Memory corruption when the payload received from firmware is not as per the expected protocol size.

Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size.

Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received.

Memory corruption when there is failed unmap operation in GPU.

Transient DOS while decoding an ASN.1 OER message containing a SEQUENCE of unknown extensions.