Qualcomm ≫ Qca6174a Firmware

Memory corruption during GNSS HAL process initialization.

Memory corruption while handling session errors from firmware.

Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.

Memory corruption while processing voice packet with arbitrary data received from ADSP.

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.

Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.

Memory corruption while maintaining memory maps of HLOS memory.

Memory corruption is possible when an attempt is made from userspace or console to write some haptics effects pattern to the haptics debugfs file.

Memory corruption while sending the persist buffer command packet from the user-space to the kernel space through the IOCTL call.

Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers.