Qualcomm ≫ Qsm8350 Firmware

Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload.

Memory corruption in WLAN handler while processing PhyID in Tx status handler.

Memory corruption in Core Platform while printing the response buffer in log.

Memory Corruption in Core Platform while printing the response buffer in log.

Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.

Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.

Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.

Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use.

Memory Corruption in WLAN HOST while parsing QMI response message from firmware.

Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message.