Qualcomm ≫ Wcn3680b Firmware

Memory corruption while processing voice packet with arbitrary data received from ADSP.

Transient DOS while parsing BTM ML IE when per STA profile is not included.

Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it.

Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.

Memory corruption during the network scan request.

Memory corruption when user provides data for FM HCI command control operations.

Memory corruption when two threads try to map and unmap a single node simultaneously.

Memory corruption while processing concurrent IOCTL calls.

Memory corruption when Alternative Frequency offset value is set to 255.

Transient DOS while handling PS event when Program Service name length offset value is set to 255.