Qualcomm ≫ Fastconnect 6900 Firmware

Transient DOS while parsing the EPTM test control message to get the test pattern.

Transient DOS while handling command data during power control processing.

Memory corruption while encoding the image data.

Memory corruption while processing config_dev IOCTL when camera kernel driver drops its reference to CPU buffers.

Memory corruption due to double free when multiple threads race to set the timestamp store.

memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.

Memory corruption while selecting the PLMN from SOR failed list.

Information disclosure when Video engine escape input data is less than expected minimum size.

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.