Qualcomm ≫ Fastconnect 6700 Firmware

Memory corruption while encoding the image data.

Memory corruption due to double free when multiple threads race to set the timestamp store.

Memory corruption due to global buffer overflow when a test command uses an invalid payload type.

Information disclosure when Video engine escape input data is less than expected minimum size.

Memory corruption while performing private key encryption in trusted application.

Memory corruption while processing simultaneous requests via escape path.

Memory corruption while processing IOCTL command with larger buffer in Bluetooth Host.

Transient DOS while processing CCCH data when NW sends data with invalid length.

Transient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE network.

Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.