Use After Free in DSP Services

Buffer Over-read in WLAN Host Cmn

Improper Validation of Array Index in WLAN Host Communication

Improper Input Validation in WLAN Resource Manager

Improper Input Validation in WIN SON

Use of Out-of-range Pointer Offset in WLAN HOST

Use After Free in WLAN Host Communication

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host

Buffer Copy Without Checking Size of Input in WLAN Firmware

Memory corruption in WLAN Firmware while doing a memory copy of pmk cache

Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame

Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length

Memory corruption in modem due to improper length check while copying into memory

Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

Cryptographic issues in WLAN during the group key handshake of the WPA/WPA2 protocol in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics…

Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…

An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto, Snapdragon Compute, Snapdragon…

Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile,…

Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Possible buffer over read due to lack of length check while parsing beacon IE response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…

Stack-based Buffer Overflow in WLAN Host

Integer Overflow to Buffer Overflow in TZ Secure OS

Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking

Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking

Memory corruption due to lack of validation of pointer arguments passed to TrustZone BSP in Snapdragon Wired Infrastructure and Networking

Memory corruption due to lack of check of validation of pointer to buffer passed to trustzone in Snapdragon Wired Infrastructure and Networking

Buffer Over-read in WLAN Host Communication

Incorrect Calculation of Buffer Size in SCE-Mink

Out-of-bounds Write in Video

Use After Free in WLAN Host Communication

Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux Boot Loader

Stack-based Buffer Overflow in WLAN HAL

Improper Input Validation in Services

Use of Out-of-range Pointer Offset in PCIe

Integer Overflow or Wraparound in TZ Secure OS

Buffer Copy without Checking Size of Input in HLOS

NULL pointer dereference in WLAN Firmware

Improper Validation of Array Index in Kernel

Buffer Copy Without Checking Size of Input in Boot

Buffer Copy Without Checking Size of Input in Audio

Improper Authentication in Core

Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command

Memory corruption in WLAN HAL while parsing WMI command parameters

Memory corruption in WLAN HAL while handling command through WMI interfaces

Memory corruption in WLAN HAL while passing command parameters through WMI interfaces

Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload

Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload

Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload