Qualcomm ≫ Wcn6740 Firmware

Memory corruption while playing audio file having large-sized input buffer.

Memory corruption in HLOS while checking for the storage type.

Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.

Memory corruption when the payload received from firmware is not as per the expected protocol size.

Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received.

Memory corruption when there is failed unmap operation in GPU.

Memory corruption while processing Codec2 during v13k decoder pitch synthesis.

Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR.

Transient DOS while processing DL NAS TRANSPORT message with payload length 0.

Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command.