Qualcomm ≫ Wcn3980 Firmware

Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling.

Memory corruption while reading secure file.

Memory corruption while prociesing command buffer buffer in OPE module.

Memory corruption may occur during IO configuration processing when the IO port count is invalid.

Memory corruption during concurrent access to server info object due to incorrect reference count update.

Memory corruption during concurrent access to server info object due to unprotected critical field.

Memory corruption during concurrent SSR execution due to race condition on the global maps list.

Transient DOS may occur while parsing SSID in action frames.

Transient DOS may occur while parsing extended IE in beacon.

Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.