Qualcomm ≫ Wcn3610 Firmware

While processing the authentication message in UE, improper authentication may lead to information disclosure.

Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem.

Memory corruption while processing API calls to NPU with invalid input.

Possible out of bound access in audio module due to lack of validation of user provided input.

Memory corruption while processing GPU page table switch.

Memory corruption while processing voice packet with arbitrary data received from ADSP.

Transient DOS while parsing BTM ML IE when per STA profile is not included.

Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it.

Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.

Memory corruption when user provides data for FM HCI command control operations.