Qualcomm ≫ Snapdragon 8 Gen 3 Mobile Firmware

Memory corruption while processing IPA statistics, when there are no active clients registered.

Memory corruption while processing IOCTL call for getting group info.

Memory corruption when two threads try to map and unmap a single node simultaneously.

Memory corruption when user provides data for FM HCI command control operations.

Memory corruption during the handshake between the Primary Virtual Machine and Trusted Virtual Machine.

Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location.

Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame.

Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame.

Memory corruption as GPU registers beyond the last protected range can be accessed through LPAC submissions.

Memory corruption while playing audio file having large-sized input buffer.