Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage

Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS

Use After Free in DSP Service

Use After Free in Video

Use of Out-of-range Pointer Offset in Camera Driver

Improper Validation of Array Index in Camera_Linux

Memory corruption due to use after free in service while trying to access maps by different threads in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…

Use After Free in HLOS

Buffer Copy Without Checking Size of Input in Audio

Out-of-bounds Write in Audio

Use After Free in HLOS

Reachable Assertion in BT Controller

Buffer Over-read in Hypervisor

Buffer Over-read in WLAN Host

Use After Free in WLAN Host Communication

Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE

Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames

Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames

Information disclosure due to buffer over-read in WLAN while parsing BTM action frame

Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check

Weak Authentication in HLOS

Buffer Over-read in Automotive Software platform based on QNX

Buffer Over-read in Audio

Buffer Over-read in Neural Processing Unit

Information Exposure in Computer Vision

Buffer Copy Without Checking Size of Input in Automotive Vehicle Networks

NULL Pointer Dereference in SPS-HLOS

Information Exposure in TZ Secure OS

Improper Authorization in SPS-HLOS

Buffer Over-read in Automotive Multimedia

Buffer Over-read in Audio

Buffer Over-read in Computer Vision

Buffer Over-read in Automotive OS Platform

Buffer Over-read in Automotive Autonomy

Buffer Over-read in Audio

Buffer Over-read in Automotive Autonomy

Buffer Over-read in FM Host

NULL Pointer Dereference in HLOS

Buffer Over-read in TZ Secure OS

Buffer Over-read in Audio

Buffer Over-read in Video

Improper Validation of Array Index in Audio

Buffer Over-read in Audio

Buffer Over-read in Audio

Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data

Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call

Transient DOS in Automotive OS due to improper authentication to the secure IO calls

Information disclosure in WLAN HAL while handling command through WMI interfaces

Information disclosure in IOE Firmware while handling WMI command

Information Disclosure in Qualcomm IPC while reading values from shared memory in VM