Qualcomm ≫ Qcn9011 Firmware

Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.

Transient DOS when processing a received frame with an excessively large authentication information element.

Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.

Memory corruption while processing identity credential operations in the trusted application.

Memory corruption while accessing a synchronization object during concurrent operations.

Memory corruption while processing shared command buffer packet between camera userspace and kernel.

Memory corruption while handling buffer mapping operations in the cryptographic driver.

Information disclosure while processing a firmware event.

Transient DOS while parsing video packets received from the video firmware.

Memory corruption while routing GPR packets between user and root when handling large data packet.