Qualcomm ≫ Wcd9385 Firmware

Memory corruption while processing DDI command calls.

Memory corruption while processing an IOCTL command with an arbitrary address.

Memory corruption while processing DDI call with invalid buffer.

Transient DOS while processing a frame with malformed shared-key descriptor.

Transient DOS while processing CCCH data when NW sends data with invalid length.

Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously.

Memory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently.

Memory corruption while submitting blob data to kernel space though IOCTL.

Transient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE network.

Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.