Qualcomm ≫ Wcd9341 Firmware

Transient DOS while parsing fragments of MBSSID IE from beacon frame.

Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it.

Memory corruption while maintaining memory maps of HLOS memory.

Memory corruption while unmapping the fastrpc map when two threads can free the same map in concurrent scenario.

Memory corruption while taking snapshot when an offset variable is set by camera driver.

Memory corruption while processing IOCTL call for getting group info.

Memory corruption when user provides data for FM HCI command control operations.

Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location.

Memory corruption when two threads try to map and unmap a single node simultaneously.

Memory corruption while processing concurrent IOCTL calls.