Qualcomm ≫ Snapdragon X75 5g Modem-rf System Firmware

Transient DOS while creating NDP instance.

Transient DOS while processing an ANQP message.

Transient DOS while processing a frame with malformed shared-key descriptor.

Transient DOS while processing CCCH data when NW sends data with invalid length.

Information disclosure while processing the hash segment in an MBN file.

Information disclosure while reading data from an image using specified offset and size parameters.

Information disclosure while opening a fastrpc session when domain is not sanitized.

Memory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently.

Transient DOS while processing the EHT operation IE in the received beacon frame.

Memory corruption may occur while attaching VM when the HLOS retains access to VM.