Qualcomm ≫ Qca6335 Firmware

Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.

Memory corruption in Audio when memory map command is executed consecutively in ADSP.

Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.

Transient DOS in WLAN Firmware while parsing a BTM request.

Memory corruption in HLOS while running playready use-case.

Memory corruption in Audio during playback with speaker protection.

Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call.

Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

Memory corruption in DSP Services during a remote call from HLOS to DSP.

Transient DOS in Automotive OS due to improper authentication to the secure IO calls.