Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer…

Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP

Use After Free in DSP Service

Use After Free in Automotive GPU

Buffer Copy Without Checking Size of Input in Automotive Audio

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Out-of-bounds Write in Audio

Incorrect Calculation of Buffer Size in HLOS

Buffer Over-read in MProc

Buffer Copy Without Checking Size of Input in Graphics Linux

Integer Overflow to Buffer Overflow in Audio

Use After Free in DSP Service

Use After Free in Graphics Linux

Use After Free in Kernel

Use of Out-of-range Pointer Offset in Audio

Improper Input Validation in Services

Use After Free in Audio

Use of Out-of-range Pointer Offset in Audio

Buffer Copy without Checking Size of Input in HLOS

Integer Overflow to Buffer Overflow in User Identity Module

Buffer Copy Without Checking Size of Input in Boot

Improper Restriction of Operations within the Bounds of a Memory Buffer in UTILS

Improper Restriction of Operations within the Bounds of a Memory Buffer in MPP Performance

Buffer Copy Without Checking Size of Input in Audio

Improper Validation of Array Index in WLAN HAL

Use of Out-of-range Pointer Offset in WLAN HAL

Buffer Copy Without Checking Size of Input in WLAN HAL

Buffer Over-read in WLAN HOST

Buffer Over-read in WLAN Host

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HAL

Double free in Core

Stack-based buffer overflow in Modem

Improper Release of Memory Before Removing Last Reference (`Memory Leak`) in Graphics

Incorrect Type Conversion or Cast in Graphics

Integer overflow or wraparound in WLAN

Improper validation of array index in User Identity Module

Incorrect type conversion in WLAN

Integer Overflow to Buffer Overflow in Modem

Use of Out-of-range Pointer Offset in MODEM

Buffer copy without checking the size of input in WLAN HAL.

Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http

Memory corruption due to configuration weakness in modem wile sending command to write protected files

Memory corruption in Audio due to integer overflow to buffer overflow while music playback of clips like amr,evrc,qcelp with modified content

Memory corruption in display due to double free while allocating frame buffer memory

Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…