Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information

Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote

Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…

Improper validation of memory region in Hypervisor can lead to incorrect region mapping in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…

Integer Overflow or Wraparound in Display

Improper Restriction of Operations within the Bounds of a Memory Buffer in Hypervisor

Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Possible integer overflow due to improper length check while updating grace period and count record in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Buffer Over-read in Multi Mode Call Processor

An integer overflow due to improper check performed after the address and size passed are aligned in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…

Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP

Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute,…

Out-of-bounds Write in Windows Compute

Use After Free in Camera Driver

Use After Free in BTHOST

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera_Linux

Out-of-bounds Write in Video

Double Free in SPS-HLOS

Cryptographic Issues in Automotive

Improper Input Validation in HLOS

Improper Input Validation in Automotive

Improper Access Control in Hypervisor

Use of Out-of-range Pointer Offset in Camera Driver

Use After Free in Camera Driver

Use After Free in HLOS

Use After Free in HLOS

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Use After Free in HLOS

Improper Input Validation in Hypervisor

Improper Input Validation in Video Analytics and Processing

Improper Validation of Array Index in Hypervisor

Buffer Copy Without Checking Size of Input in Graphics Linux

Integer Overflow to Buffer Overflow in Audio

Use After Free in Computer Vision

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Use After Free in DSP Service

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host

Use After Free in Graphics Linux

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive

Use After Free in Graphics

Permissions, Privileges, and Access Control issues in TZ Secure OS

Buffer Over-read in Trusted Execution Environment

Double Free in HLOS

Buffer Copy Without Checking Size of Input in Trusted Execution Environment

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in TZ Secure OS

Memory corruption when the channel ID passed by user is not validated and further used

Memory corruption when the payload received from firmware is not as per the expected protocol size

Memory corruption when IOMMU unmap of a GPU buffer fails in Linux