Qualcomm ≫ Ipq6028 Firmware

Memory corruption in WLAN Host while processing RRM beacon on the AP.

Memory corruption when processing cmd parameters while parsing vdev.

Transient DOS when processing a NULL buffer while parsing WLAN vdev.

Memory corruption in DSP Services during a remote call from HLOS to DSP.

Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.

Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast.

Under certain scenarios the WLAN Firmware will reach an assertion due to state confusion while looking up peer ids.

Memory corruption in Kernel while parsing metadata.

Memory corruption while loading an ELF segment in TEE Kernel.

Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.