Qualcomm ≫ Qcn9074 Firmware

Transient DOS while handling beacon frames with invalid IE header length.

Memory corruption while processing manipulated payload in video firmware.

Memory corruption while processing video packets received from video firmware.

Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.

Transient DOS while processing the tone measurement response buffer when the response buffer is out of range.

Transient DOS while processing the EHT operation IE in the received beacon frame.

Memory corruption may occur while processing voice call registration with user.

Memory corruption may occur during IO configuration processing when the IO port count is invalid.

Memory corruption during concurrent access to server info object due to incorrect reference count update.

Memory corruption during concurrent access to server info object due to unprotected critical field.