Qualcomm ≫ Ipq8074 Firmware

Memory corruption when allocating and accessing an entry in an SMEM partition continuously.

Memory corruption while redirecting log file to any file location with any file name.

Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction sequence number.

Transient DOS while parse fils IE with length equal to 1.

Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.

Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.

Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.

Information disclosure in WLAN HAL while handling command through WMI interfaces.

Information disclosure in IOE Firmware while handling WMI command.

Transient DOS in WLAN Firmware while parsing rsn ies.