Qualcomm ≫ Wcn3991 Firmware

Possible out of bound access in audio module due to lack of validation of user provided input.

Memory corruption in Core while processing RX intent request.

Memory corruption in DSP Services during a remote call from HLOS to DSP.

Transient DOS in Automotive OS due to improper authentication to the secure IO calls.

Memory corruption in Audio while running invalid audio recording from ADSP.

Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.

Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast.

Transient DOS in Modem after RRC Setup message is received.

Transient DOS in Modem when a Beam switch request is made with a non-configured BWP.

Transient DOS in Data modem while handling TLB control messages from the Network.