Qualcomm ≫ Sxr2250p Firmware

Memory corruption while encoding JPEG format.

Memory corruption while handling schedule request in Camera Request Manager(CRM) due to invalid link count in the corresponding session.

Memory corruption during concurrent SSR execution due to race condition on the global maps list.

Transient DOS may occur while parsing SSID in action frames.

Transient DOS may occur while parsing EHT operation IE or EHT capability IE.

Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.

Memory corruption while processing multiple IOCTL calls from HLOS to DSP.

Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.

Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass.