Qualcomm ≫ Sd821 Firmware

Memory corruption while processing finish_sign command to pass a rsp buffer.

Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.

Memory corruption in HLOS while running playready use-case.

Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.

Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.

Memory Corruption in SPS Application while exporting public key in sorter TA.

Memory corruption in Audio while processing the VOC packet data from ADSP.

Memory corruption in WLAN HAL while handling command streams through WMI interfaces.

Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.

Memory Corruption in Audio while allocating the ion buffer during the music playback.