Qualcomm ≫ Qca6175a Firmware

Transient DOS while parsing fragments of MBSSID IE from beacon frame.

Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.

Information disclosure while handling beacon probe frame during scan entry generation in client side.

Information disclosure while handling beacon or probe response frame in STA.

Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.

Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.

Memory corruption in WLAN HOST while processing the WLAN scan descriptor list.

Information Disclosure in WLAN Host when processing WMI event command.

Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command.

Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan.