Qualcomm ≫ Snapdragon Sc8180x-aa Firmware

Transient DOS while parsing WPA IES, when it is passed with length more than expected size.

Memory corruption when processing cmd parameters while parsing vdev.

Transient DOS when processing a NULL buffer while parsing WLAN vdev.

Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.

Memory corruption while loading an ELF segment in TEE Kernel.

Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.

Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level.

Memory Corruption in SPS Application while exporting public key in sorter TA.

Memory corruption in MPP performance while accessing DSM watermark using external memory address.