Qualcomm ≫ Qualcomm 205 Mobile Platform Firmware

Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.

Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards.

Memory corruption while handling file descriptor during listener registration/de-registration.

Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem.

Memory corruption when allocating and accessing an entry in an SMEM partition.

Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.

Memory corruption in Audio when memory map command is executed consecutively in ADSP.

Memory corruption in HLOS while running playready use-case.