Qualcomm ≫ Qcn9074 Firmware

Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.

Memory corruption during session sign renewal request calls in HLOS.

Information disclosure while handling beacon probe frame during scan entry generation in client side.

Transient DOS during music playback of ALAC content.

Information disclosure while handling beacon or probe response frame in STA.

Information disclosure while parsing sub-IE length during new IE generation.

Memory corruption during the secure boot process, when the `bootm` command is used, it bypasses the authentication of the kernel/rootfs image.

Memory corruption when allocating and accessing an entry in an SMEM partition.

Memory corruption while performing finish HMAC operation when context is freed by keymaster.

Transient DOS while loading the TA ELF file.