Qualcomm ≫ Snapdragon X35 5g Modem-rf Firmware

Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it for a process-specific task, issues may arise.

Memory corruption while processing IOCTL call for getting group info.

Memory corruption while playing audio file having large-sized input buffer.

Memory corruption when the payload received from firmware is not as per the expected protocol size.

Memory corruption while verifying the serialized header when the key pairs are generated.

Memory corruption in HLOS while checking for the storage type.

Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received.

Memory corruption while loading a VM from a signed VM image that is not coherent in the processor cache.

Memory corruption while processing Codec2 during v13k decoder pitch synthesis.

Transient DOS while processing DL NAS Transport message when message ID is not defined in the 3GPP specification.