Vulnerabilidades

Transient DOS when processing authentication frames with invalid FILS information element header lengths.

Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.

Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.

Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.

Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.

Transient DOS when processing target power rate tables during channel configuration.

Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans.

Memory corruption while deinitializing a HDCP session.

Information disclosure while processing a firmware event.

Memory corruption while processing a GP command response.

Memory corruption while performing encryption and decryption commands.

Information disclosure while registering commands from clients with diag through diagHal.

Memory corruption while performing SCM call with malformed inputs.

Memory corruption while processing a malformed license file during reboot.

Memory corruption during PlayReady APP usecase while processing TA commands.

Information disclosure may occur while processing the hypervisor log.

Memory corruption while performing SCM call.

Transient DOS while processing power control requests with invalid antenna or stream values.

Transient DOS while handling command data during power control processing.

Transient DOS while parsing the EPTM test control message to get the test pattern.

memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.

Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.

Memory corruption while performing private key encryption in trusted application.

Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake.

Information disclosure while running video usecase having rogue firmware.