Qualcomm ≫ Qcn5054 Firmware

Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE.

Memory corruption in WLAN Host while processing RRM beacon on the AP.

Memory corruption when processing cmd parameters while parsing vdev.

Transient DOS when processing a NULL buffer while parsing WLAN vdev.

Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.

Under certain scenarios the WLAN Firmware will reach an assertion due to state confusion while looking up peer ids.

Memory corruption in MPP performance while accessing DSM watermark using external memory address.

Transient DOS in WLAN Firmware while parsing no-inherit IES.

Information Disclosure in Qualcomm IPC while reading values from shared memory in VM.

Memory corruption in WLAN Firmware while doing a memory copy of pmk cache.