Trusted APPS to overwrite the CPZ memory of another use-case as TZ only checks the physical address not overlapping with its memory and its RoT memory in Snapdragon Auto,…

Possible use after free due to lack of null check while memory is being freed in FastRPC driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…

Possible integer overflow due to improper length check while flashing an image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

A possible use-after-free occurrence in audio driver can happen when pointers are not properly handled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Out of bound write can occur in TZ command handler due to lack of validation of command ID in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…

Out of bound write can occur in playready while processing command due to lack of input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

When sending a socket event message to a user application, invalid information will be passed if socket is freed by other thread resulting in a Use After Free condition in…

Use after free in GPU driver while mapping the user memory to GPU memory due to improper check of referenced memory in Snapdragon Auto, Snapdragon Compute, Snapdragon…

Possible out of bounds while accessing global control elements due to race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…

Possible memory corruption and information leakage in sub-system due to lack of check for validity and boundary compliance for parameters that are read from shared MSG RAM in…

Out of bound write and read in TA while processing command from NS side due to improper length check on command and response buffers in Snapdragon Auto, Snapdragon Compute,…

Improper Validation of Syntactic Correctness of Input in Automotive Linux OS

Buffer Over-read in BT Controller

Reachable Assertion in WLAN Firmware

Buffer Over-read in WLAN Embedded SW

Buffer Over-read in WLAN Embedded SW

Buffer Over-read in WLAN Host

Buffer Over-read in WLAN Host

Buffer Over-read in WLAN Firmware

Buffer Over-read in WLAN Host

Buffer Over-read in WLAN Firmware

Loop with Unreachable Exit Condition (Infinite Loop) in WLAN Firmware

NULL Pointer Dereference in WLAN Firmware

Buffer Over-read in WLAN Firmware

Buffer Over-read in WLAN Firmware

Buffer over-read in WLAN Firmware

Integer Overflow or Wraparound in Bluetooth Host

Buffer Over-read in WLAN Firmware

NULL pointer Dereference in Modem

Improper Authorization in WLAN Host

Improper Authorization in WLAN Host

Buffer Over-read in Network Services

NULL pointers dereference in Modem

Buffer over-read in Bluetooth Host.

Buffer over-read in Modem

Buffer over-read in Modem

Buffer over-read in WLAN Firmware.

Buffer over-read in WLAN

Buffer over-read in Modem

Buffer Over-read in MODEM

Null Pointer Dereference in MODEM

Loop with Unreachable Exit Condition in MODEM

Null Pointer Dereference in MODEM

Buffer Over-read in MODEM

Buffer Over-read in MODEM

Null pointer dereference in Bluetooth HOST

Null pointer dereference in Bluetooth HOST

Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes

Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames