Qualcomm ≫ Snapdragon 480+ 5g Mobile Platform (sm4350-ac) Firmware

Memory corruption during GNSS HAL process initialization.

Information disclosure while sending implicit broadcast containing APP launch information.

Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon.

Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker.

Transient DOS while parsing fragments of MBSSID IE from beacon frame.

Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.

Memory corruption when memory mapped in a VBO is not unmapped by the GPU SMMU.

Memory corruption while processing graphics kernel driver request to create DMA fence.

Memory corruption when kernel driver attempts to trigger hardware fences.

Transient DOS when NAS receives ODAC criteria of length 1 and type 1 in registration accept OTA.