Qualcomm ≫ Sa8295p Firmware

Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.

Transient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs.

Transient DOS due to buffer over-read in WLAN Host while parsing frame information.

Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation.

Transient Denial-of-service in Automotive due to improper input validation while parsing ELF file.

Memory corruption in core due to stack-based buffer overflow

Information disclosure due to buffer overread in Core

Information disclosure due to buffer overread in Core

Memory corruption due to stack-based buffer overflow in Core

Transient DOS due to buffer over-read in WLAN while parsing corrupted NAN frames.