Qualcomm ≫ Qca9984 Firmware

Transient DOS while parsing WPA IES, when it is passed with length more than expected size.

Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE.

Memory corruption in WLAN Host while processing RRM beacon on the AP.

Memory corruption when processing cmd parameters while parsing vdev.

Transient DOS when processing a NULL buffer while parsing WLAN vdev.

Memory corruption in DSP Services during a remote call from HLOS to DSP.

Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.

Memory corruption while loading an ELF segment in TEE Kernel.

Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.

Memory corruption in MPP performance while accessing DSM watermark using external memory address.