Memory Corruption in Multi-mode Call Processor while processing bit mask API

Memory Corruption in Data Modem while making a MO call or MT VOLTE call

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network

Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received

memory corruption in modem due to improper check while calculating size of serialized CoAP message

Memory corruption in modem due to improper input validation while handling the incoming CoAP message

Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface

Memory correction in modem due to buffer overwrite during coap connection

Memory corruption in modem due to improper length check while copying into memory

Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

Cryptographic issues in WLAN during the group key handshake of the WPA/WPA2 protocol in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics…

Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…

Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…

Integer underflow can occur due to improper handling of incoming RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…

Possible buffer underflow due to lack of check for negative indices values when processing user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics…

Possible information exposure and denial of service due to NAS not dropping messages when integrity check fails in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Memory corruption while loading an ELF segment in TEE Kernel

Memory corruption in modem due to buffer overflow while processing a PPP packet

Improper validation of memory region in Hypervisor can lead to incorrect region mapping in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…

Buffer Over-read in Multi Mode Call Processor

Incorrect Calculation of Buffer Size in HLOS

Permissions, Privileges, and Access Control issues in TZ Secure OS

Buffer Over-read in Trusted Execution Environment

Double Free in HLOS

Buffer Copy Without Checking Size of Input in Trusted Execution Environment

Memory corruption in SPS Application while requesting for public key in sorter TA

Memory corruption in Core while processing control functions

Memory corruption in Audio during playback with speaker protection

Memory corruption in TZ Secure OS while requesting a memory allocation from TA region

Memory corruption in HLOS while running playready use-case

Memory corruption while using the UIM diag command to get the operators name

Memory corruption in Boot while running a ListVars test in UEFI Menu during boot

Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments

Memory Corruption in SPS Application while exporting public key in sorter TA

Cryptographic issue in HLOS during key management

Memory corruption in TZ Secure OS while loading an app ELF

Memory Corruption in Core due to secure memory access by user while loading modem image

Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE

Memory corruption due to double free in Core while mapping HLOS address to the list

Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length

Memory corruption due to double free in core while initializing the encryption key

Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message

Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response

Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM

Memory corruption due to configuration weakness in modem wile sending command to write protected files

Memory corruption due to stack-based buffer overflow in Core

Memory corruption in core due to stack-based buffer overflow

Memory corruption in Core due to stack-based buffer overflow