Qualcomm ≫ Sm4125 Firmware

Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame.

Memory corruption when the payload received from firmware is not as per the expected protocol size.

Memory corruption when there is failed unmap operation in GPU.

Memory corruption in SPS Application while requesting for public key in sorter TA.

Memory corruption while processing finish_sign command to pass a rsp buffer.

Memory corruption in Audio while processing RT proxy port register driver.

Memory corruption in Core Services while executing the command for removing a single event listener.

Transient DOS while parse fils IE with length equal to 1.

Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.

Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.