Transient DOS in WLAN Firmware while parsing a BTM request.
Information disclosure in IOE Firmware while handling WMI command.
Information Disclosure in data Modem while parsing an FMTP line in an SDP message.
Information disclosure in Video while parsing mp2 clip with invalid section length.
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data.
Memory Corruption in WLAN HOST while fetching TX status information.
Information Disclosure in Qualcomm IPC while reading values from shared memory in VM.
Transient DOS during hypervisor virtual I/O operation in a virtual machine.
Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan.
Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.
Information disclosure in WLAN HAL while handling command through WMI interfaces.
Information disclosure in WLAN HAL while handling the WMI state info command.
Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length.
Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.
Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.
Information disclosure while handling T2LM Action Frame in WLAN Host.
Transient DOS while parse fils IE with length equal to 1.
Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.