Buffer Over-read in WLAN Host Cmn

Improper Validation of Array Index in WLAN Host Communication

Use of Out-of-range Pointer Offset in WLAN HOST

Use After Free in WLAN Host Communication

Use of Out-of-range Pointer Offset in WLAN HOST

Stack-based Buffer Overflow in WLAN HOST

Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute

Memory corruption in WLAN Firmware while doing a memory copy of pmk cache

Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame

Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics…

Cryptographic Issues in BT Controller

Buffer Over-read in WLAN HOST

An Out of Bounds read may potentially occur while processing an IBSS beacon, in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…

Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Memory corruption in WLAN HOST while processing the WLAN scan descriptor list

Buffer Over-read in WLAN Host Communication

Use After Free in WLAN Host Communication

Integer Overflow or Wraparound in WLAN HOST

Stack-based Buffer Overflow in WLAN HAL

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Kernel

Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level

Memory corruption while processing audio effects

Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command

Memory corruption in WLAN HAL while parsing WMI command parameters

Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload

Memory corruption in WLAN handler while processing PhyID in Tx status handler

Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART

Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers

Memory corruption in WLAN while running doDriverCmd for an unspecific command

Memory Corruption in WLAN HOST while fetching TX status information

Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message

Memory Corruption in WLAN HOST while parsing QMI response message from firmware

Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory

Memory corruption in WLAN HOST while receiving an WMI event from firmware

Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host

Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase

Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command

Memory corruption due to buffer copy without checking size of input in modem while receiving WMI_REQUEST_STATS_CMDID command

Possible out of bound read due to improper length calculation of WMI message

Possible out of bound write due to improper validation of number of timer values received from firmware while syncing timers in Snapdragon Auto, Snapdragon Compute, Snapdragon…

Improper validation of data length received from DMA buffer can lead to memory corruption

Buffer Over-read in WLAN Firmware

Reachable Assertion in WLAN Firmware

Buffer Over-read in WLAN Firmware

Buffer Over-read in WLAN Firmware

Buffer Over-read in WLAN Host Communication

Buffer Over-read in WLAN Host Communication

Buffer Over-read in WLAN Host Communication

Buffer Over-read in WLAN Host

Buffer Over-read in WLAN Host