Qualcomm ≫ Ipq4028 Firmware

Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.

Transient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver.

Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.

Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE.

Memory corruption in WLAN Host while processing RRM beacon on the AP.

Memory corruption in DSP Services during a remote call from HLOS to DSP.

Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.

Information disclosure in WLAN HAL while handling command through WMI interfaces.

Information Disclosure in Qualcomm IPC while reading values from shared memory in VM.

Information disclosure in IOE Firmware while handling WMI command.