Qualcomm ≫ Snapdragon X35 5g Modem-rf System Firmware

There may be information disclosure during memory re-allocation in TZ Secure OS.

Memory corruption while assigning memory from the source DDR memory(HLOS) to ADSP.

Memory corruption while Configuring the SMR/S2CR register in Bypass mode.

Memory corruption when allocating and accessing an entry in an SMEM partition continuously.

Memory corruption during GNSS HAL process initialization.

Memory corruption while processing voice packet with arbitrary data received from ADSP.

Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.

Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.

Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers.