Qualcomm ≫ Sar2130p Firmware

Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection.

Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans.

Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling.

Memory corruption while using alignments for memory allocation.

Memory Corruption when adding user-supplied data without checking available buffer space.

Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.

Memory Corruption when accessing buffers with invalid length during TA invocation.

Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.

Transient DOS when processing a received frame with an excessively large authentication information element.

Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.