qualcomm / 5g_fixed_wireless_access_platform_firmware CVEs

Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling.

Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.

Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.

Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.

Memory corruption when decoding corrupted satellite data files with invalid signature offsets.

Transient DOS when MAC configures config id greater than supported maximum value.

Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.

Transient DOS when an LTE RLC packet with invalid TB is received by UE.