Vulnerabilidades

Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.

Memory corruption while processing a malformed license file during reboot.

Memory corruption during PlayReady APP usecase while processing TA commands.

Transient DOS while parsing the EPTM test control message to get the test pattern.

Memory corruption due to global buffer overflow when a test command uses an invalid payload type.

Information disclosure while processing the hash segment in an MBN file.

Information disclosure while reading data from an image using specified offset and size parameters.

While processing the authentication message in UE, improper authentication may lead to information disclosure.

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.

Memory corruption in Core while processing control functions.

Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level.