Qualcomm ≫ Flight Rb5 5g Firmware

Transient DOS while parsing per STA profile in ML IE.

Memory corruption while triggering commands in the PlayReady Trusted application.

Memory corruption while calling the NPU driver APIs concurrently.

Memory corruption in display driver while detaching a device.

Memory corruption may occur while validating ports and channels in Audio driver.

Information disclosure while deriving keys for a session for any Widevine use case.

Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it for a process-specific task, issues may arise.

Memory corruption while processing IOCTL call for getting group info.

Memory corruption when two threads try to map and unmap a single node simultaneously.

Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location.