Use After Free in DSP Services

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Buffer copy without checking the size of input in Core

Memory Corruption in MODEM

Integer Overflow to Buffer Overflow in Bluetooth HOST

Buffer copy in GATT multi notification due to improper length check for the data coming over-the-air in Snapdragon Connectivity, Snapdragon Industrial IOT

Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…

Improper validation of memory region in Hypervisor can lead to incorrect region mapping in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…

Possible memory corruption in RPM region due to improper XPU configuration in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired…

u'Buffer overflow while processing PDU packet in bluetooth due to lack of check of buffer length before copying into it.' in Snapdragon Auto, Snapdragon Compute, Snapdragon…

u'Buffer overflow while processing a crafted PDU data packet in bluetooth due to lack of check of buffer size before copying' in Snapdragon Auto, Snapdragon Compute, Snapdragon…

Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Improper access control in trusted application environment can cause unauthorized access to CDSP or ADSP VM memory with either privilege in Snapdragon Auto, Snapdragon Compute,…

Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon…

Possible integer overflow due to improper length check while updating grace period and count record in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

An integer overflow due to improper check performed after the address and size passed are aligned in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…

Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP

Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute,…

u'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap packet received from peer device.' in Snapdragon Auto, Snapdragon Compute, Snapdragon…

u'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap configuration request received from peer device.' in Snapdragon Auto, Snapdragon…

Use of Out-of-range Pointer Offset in Audio

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Radio Interface Layer

Integer Overflow to Buffer Overflow in HLOS

Integer Overflow to Buffer Overflow in User Identity Module

Buffer Copy Without Checking Size of Input in Boot

Buffer Copy Without Checking Size of Input in Audio

Buffer Copy Without Checking Size of Input in Automotive Audio

Buffer Copy Without Checking Size of Input in Audio

Buffer Copy Without Checking Size of Input in WLAN HAL

Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

Improper Restriction of Operations within the Bounds of a Memory Buffer in Audio

Integer Overflow to Buffer Overflow in RIL

Improper Validation of Array Index in Linux

Buffer over-read in Modem

Improper validation of array index in WLAN HAL

Integer Overflow or Wraparound in Audio

Integer Overflow or Wraparound in Audio

Incorrect Type Conversion or Cast in Core

Improper Validation of Array Index in GPS HLOS Driver

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN

Incorrect Type Conversion or Cast in Trusted Execution Environment

Improper Access control in GPU Subsystem

Improper Input Validation in Audio

Improper Input Validation in WLAN HOST

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HAL

Improper access control in Kernel

Double free in Core

Double free in Automotive

Improper restriction of operations within the bounds of memory buffer in Linux