Integer Overflow or Wraparound in Graphics Linux

Use After Free in DSP Services

Memory corruption while loading an ELF segment in TEE Kernel

Memory corruption in WLAN HOST while processing the WLAN scan descriptor list

Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information

Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote

Improper Restriction of Operations within the Bounds of a Memory Buffer in Hypervisor

Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Possible integer overflow due to improper length check while updating grace period and count record in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Buffer Over-read in Multi Mode Call Processor

Out-of-bounds Write in Windows Compute

Double Free in SPS-HLOS

Cryptographic Issues in Automotive

Improper Input Validation in HLOS

Improper Input Validation in Automotive

Improper Access Control in Hypervisor

Improper Input Validation in Hypervisor

Improper Input Validation in Video Analytics and Processing

Improper Validation of Array Index in Hypervisor

Buffer Copy Without Checking Size of Input in Graphics Linux

Integer Overflow to Buffer Overflow in Audio

Use After Free in Computer Vision

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive

Permissions, Privileges, and Access Control issues in TZ Secure OS

Buffer Over-read in Trusted Execution Environment

Double Free in HLOS

Buffer Copy Without Checking Size of Input in Trusted Execution Environment

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in TZ Secure OS

Improper Input Validation in Secure Processor

Use of Out-of-range Pointer Offset in Video

Access of Uninitialized Pointer in SPS Applications

Integer Overflow or Wraparound in HLOS

Use After Free in Kernel

Buffer Over-read in Trusted Execution Environment

Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in SPS-Applications

Buffer Copy Without Checking Size of Input in SPS Applications

Use of Out-of-range Pointer Offset in PCIe

Configuration Issue in Core

Buffer copy without checking size of Input in Core

Use After Free in Audio

Use After Free in Audio

Use after free in Neural Processing Unit

Integer Overflow or Wraparound in Radio Interface Layer

Use of Out-of-range Pointer Offset in Audio

Buffer Copy without Checking Size of Input in HLOS

Memory corruption in HLOS while invoking IOCTL calls from user-space