Qualcomm ≫ Sdx20 Firmware

Memory corruption due to configuration weakness in modem wile sending command to write protected files.

Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http.

Information disclosure due to buffer over-read in WLAN while parsing NMF frame.

Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet.

Memory corruption in Audio due to integer overflow to buffer overflow while music playback of clips like amr,evrc,qcelp with modified content.

Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.

Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.

Transient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed.

Transient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protocol PDU with zero length data.

Denial of service while processing fastboot flash command on mmc due to buffer over read