Qualcomm ≫ Wcn3660b Firmware

Memory corruption while handling IOCTL calls in JPEG Encoder driver.

Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver.

Memory corruption while station LL statistic handling.

Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice.

Transient DOS while parsing fragments of MBSSID IE from beacon frame.

Transient DOS while parsing BTM ML IE when per STA profile is not included.

Memory corruption while processing the update SIM PB records request.

Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it.

Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.

memory corruption when WiFi display APIs are invoked with large random inputs.