Qualcomm ≫ Qca6391 Firmware

Memory corruption due to double free when multiple threads race to set the timestamp store.

memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.

Memory corruption while selecting the PLMN from SOR failed list.

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.

Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake.

Memory corruption while performing private key encryption in trusted application.

Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.

Memory corruption while processing simultaneous requests via escape path.

Memory corruption while processing IOCTL command with larger buffer in Bluetooth Host.