Qualcomm ≫ Sd855 Firmware

Information disclosure in Audio while accessing AVCS services from ADSP payload.

Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.

Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time.

Memory corruption in Audio when memory map command is executed consecutively in ADSP.

Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.

Memory corruption while receiving a message in Bus Socket Transport Server.

Transient DOS in Data Modem during DTLS handshake.

Transient DOS in WLAN Firmware while parsing a BTM request.

Memory corruption in HLOS while running playready use-case.

Memory corruption in TZ Secure OS while requesting a memory allocation from TA region.