Qualcomm ≫ Sd660 Firmware

Memory corruption while processing video packets received from video firmware.

Transient DOS while processing received beacon frame.

Transient DOS may occur while processing malformed length field in SSID IEs.

Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.

Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.

Information disclosure may occur while processing goodbye RTCP packet from network.

Information disclosure may occur while decoding the RTP packet with invalid header extension from network.

Memory corruption while reading the FW response from the shared queue.

Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.

Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.